Your account

Your own name, email and password, and the security on your sign-in. This is about you personally, not about your workspace or your sites.

The short version

• Click your name at the bottom of the sidebar.
• Change your name, email or password on the tabs there.
• Turn on two-step sign-in. It is the one that matters.
• You can sign out other devices from here.

Your details

Name and email address are on the General tab. Your email is what you sign in with and where account mail goes, so changing it changes both.

Your password

On the Security tab. Use a long one that you do not use anywhere else, and let your browser or a password manager remember it.

Length beats complexity. Three or four unrelated words are both stronger and easier to live with than a short password full of symbols.

Two-step sign-in

This is the single most valuable thing on this page. With it on, somebody who has your password still cannot get in.

You can use an authenticator app on your phone, or have a code sent to you by text. The app is better: it works without signal and cannot be intercepted.

Turn it on. Your workspace holds your website, your customer list and your payment settings, and a password on its own is one leaked database away from being public.

Backup codes

When you turn on two-step sign-in you get backup codes. They are how you get in if you lose your phone.

Save them somewhere that is not your phone. A password manager, or printed and in a drawer. Backup codes stored on the device they exist to replace are no help at all.

Your devices

You can see where you are signed in and sign out any of them, or all at once. Worth doing if you have used a shared computer, or lost a device.

If you forget your password

Use the forgotten-password link on the sign-in page and follow the email. If you have two-step sign-in on you will still need your second step, which is exactly what it is there for.