Your account

Your own name, email and password, and the security on your sign-in. This is about you personally, not about your workspace or your sites.

The short version

• Click your name at the top right of the screen, then Account settings.
• Change your name, email or password on the tabs there.
• Turn on two-step sign-in. It is the one that matters.
• You can sign out devices that stay signed in from here.

Your details

Name and email address are on the General tab. Your email is what you sign in with and where account mail goes, so changing it changes both.

Your password

On the Security tab. Use a long one that you do not use anywhere else, and let your browser or a password manager remember it.

Length beats complexity. Three or four unrelated words are both stronger and easier to live with than a short password full of symbols.

Two-step sign-in

This is the single most valuable thing on this page. With it on, somebody who has your password still cannot get in.

You can use an authenticator app on your phone, or have a code sent to you by text. The app is better: it works without signal and cannot be intercepted.

Turn it on. Your workspace holds your website, your customer list and your payment settings, and a password on its own is one leaked database away from being public.

Backup codes

When you turn on two-step sign-in you get backup codes. They are how you get in if you lose your phone.

Save them somewhere that is not your phone. A password manager, or printed and in a drawer. Backup codes stored on the device they exist to replace are no help at all.

A PIN for your own devices

Also on the Security tab. On a device where you ticked "Remember me", a 4-digit PIN signs you back in without your password or your two-step code. Only set one if nobody else uses that device.

Your devices

The Security tab lists every device where you ticked "Remember me", and you can sign out any of them, or all at once. A device you sign out asks for your password again. Worth doing if you have used a shared computer, or lost a device.

Coming over from Pilaster

If you work for a chamber of commerce that runs on Pilaster, you can move between Pilaster and your website here without signing in twice. Open Pilaster is in the menu under your name, and the sign-in page offers Continue with Pilaster once you have come over that way. If you have two-step sign-in on here, it still asks for your second step, just as signing in here normally would.

If you forget your password

Use the forgotten-password link on the sign-in page and follow the email. If you have two-step sign-in on you will still need your second step, which is exactly what it is there for.