Secure your account
Every way into your login lives on one page: your password, two-factor authentication, passkeys and connected sign-ins.
Who can do this: everyone, for their own login.
Open Settings, choose the You tab, then Password & sign-in. You may be asked to confirm your password before the page opens. The page lists "Every way in to your login, and the way to take each of them back."
Password
Enter your Current password ("Confirms it is really you making the change."), then the New password and Confirm password, and select Save. Changing your password signs every other session out.
Use a long, random password kept in a password manager.
Two-factor authentication
The Authenticator app row adds a one-time code from an app on your phone to every sign-in with your password. When you turn it on you receive recovery codes, which are your way back in if you lose the phone. See Turn on two-factor authentication.
Passkeys
A passkey "signs you in with the device you are holding": your fingerprint, face, device PIN or a hardware security key, instead of a password. See Add a passkey.
Connected accounts
If you signed up or signed in with Google or GitHub, that sign-in is listed under Connected accounts, with when it was connected and last used. A connected account signs you in without your password, and it keeps working after you change your password.
To revoke one, select Disconnect on its row and confirm. "Disconnecting takes effect immediately. If you find you cannot sign in afterwards, request a password reset from the sign-in page and follow the link sent to the email address you sign in with."
A strong setup
The methods are independent, and you can hold all of them at once:
- A passkey on each device you sign in from, for everyday use.
- A password with two-factor authentication as the fallback.
- Your recovery codes stored somewhere other than the phone that holds your authenticator app.
A workspace can also require every member to hold a second factor. An authenticator app or a passkey both count. See Require two-factor for a workspace.