Security Overview

The Security page allows you to manage your account security by changing your password and configuring two-factor authentication (2FA).

To access the Security page, click on the user menu in the bottom left corner, then select Security.

Figure 1: Location of the user menu

Changing Your Password

To change your password:

1. Enter your current password in the first field.
2. Enter your new password in the second field.
3. Click Save.

Figure 2: Password change form

Your new password must meet the following requirements:

• Have between 12 and 128 characters
• At least one uppercase letter (A-Z)
• At least one lowercase letter (a-z)
• At least one digit (0-9)
• At least one special character (for example "!", "$", "%")

If your password does not meet these requirements, an error message will appear below the password field.

After successfully changing your password, you will be redirected to the home page.

Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security to your account by requiring a time-based code from an authenticator app in addition to your password.

Figure 3: 2-factor authentication banner, showing the current state of 2FA

Enabling 2FA

1. In the Two-Factor Authentication section, click Enable 2FA.
2. Scan the QR code with your authenticator app (such as Google Authenticator, Authy, or FreeOTP).
   Figure 4: Enabling 2-factor authentication
   
   If you cannot scan the QR code, you can manually enter the secret key and configuration details shown below the QR code into your authenticator app.
3. Click Confirm QR code scan to proceed.
4. Enter the 6-digit code displayed in your authenticator app.
   Figure 5: Confirming the 2-factor authentication setup by entering a code from the authenticator app
5. Click Confirm code to complete the setup.

Once enabled, you will need to enter a code from your authenticator app each time you log in.

Disabling 2FA

In the "2-Factor authentication" section, click Disable 2FA. 2FA will be disabled immediately and you will no longer need to enter a code when logging in.

⚠️ Warning: Disabling 2FA significantly reduces the security of your account. Your account will then only be protected by your password.