Docs Ordnary Account

Signing in and security

Sign-in codes, passwords, passkeys, two-step verification, recovery files and where you're signed in.

Sign-in code: enter your email address and we send you a 6-digit code.
Password: choose Enter password on the code screen to sign in with your password instead.
Passkey: sign in with your fingerprint, face or device PIN, without a password.
Recovery file: if you forgot your password, upload the PDF you downloaded from the Account Center.

Passkeys

A passkey is stored on your device or in your password manager and can't be phished. Add one in Password and security, under Two-step verification, Passkeys. You can add several, for example one per device, and remove them there too.

Two-step verification

1
Open Two-step verification
Go to Password and security in the Account Center.
2
Add your authenticator app
Scan the QR code with an app such as Google Authenticator or 1Password, or copy the key.
3
Confirm with a code
Enter the 6-digit code from the app to turn it on.
4
Save your recovery codes
Keep them somewhere safe. Each code works once if you lose access to your app.

Recovery file

A recovery file is a PDF that signs you in when you upload it, without a password or code. It's useful if you lose your phone or forget your password.

1
Download it
In Password and security, open Two-step verification and choose Recovery file. You can download the file once, when it's made.
2
Keep it safe
Store it somewhere only you can reach, such as a printed copy or an encrypted drive.
3
Sign in with it
On the sign-in page, enter your email address and choose Forgot password?, then Sign in with a recovery file, and upload the PDF. If uploading isn't possible, paste the code printed on it.

Only for your account: the file only works together with the email address it belongs to.
One at a time: a new file replaces the old one, which stops working straight away.
New file: because a file can only be downloaded once, getting a new one needs a code we send to your email address.
Every use is emailed: we email you each time someone signs in with your file, with the IP address.
Remove it any time from the same place in Password and security.

Where you're signed in

Sign-in activity in Password and security lists the devices that are signed in to your account, with their location and last activity. Log out of any device you don't recognise, or of all other devices at once.