Account and security
Sign-in methods, two-factor sign-in, sessions, and privacy settings.
Signing in
- Email and password. A new account verifies its email first.
- Magic link: a sign-in link by email.
- Google.
Two-factor sign-in
Under Control Center › Security, turn on an authenticator app: scan the code, save the backup codes, then confirm with a first code. From then on every sign-in, whichever method, asks for a code. A backup code works once in place of one.
Password and sessions
Changing your password asks for the current one and signs you out everywhere. It also revokes your API keys. A password reset does the same.
Privacy
- Hide email addresses (My Profile) masks addresses on screen in this browser, for screen sharing and recordings.
- Timezone (My Profile) sets the clock in the header and how dates read.
- Your email data is used only to provide the service and never sold.
Choosing a server
Each browser talks to one server, the hosted one by default. Under Control Center › Organization › Self hosted (or Change on the sign-in page) point it at your own. See Self-hosting.