Account & Security

In Settings, under Security, you enable two-factor authentication with one method: either an authenticator app (TOTP, 6-digit codes) or an emailed 6-digit code. When you enable it, you are shown 10 one-time backup codes once, so save them somewhere safe. At sign-in you enter the code, or one of your backup codes.

You can see your active sessions with their device, IP, and date, sign out an individual device, or sign out all other sessions at once. A recent-activity log records logins, password changes, and session sign-outs.

You can change your password in place; doing so signs out your other devices. You can change your email with a confirmation link sent to the new address, and a security notice is sent to the old one.

Connect Telegram for external alerts by providing a bot token and chat id, with a test button to confirm delivery. You can also toggle which event types appear in your in-app notification center.

You can export all of your data as JSON yourself (a GDPR self-serve export). You can also delete your account via an emailed confirmation link. On confirmation, the account is deactivated and your personal data is anonymized immediately.