Account and security

Signing in

An account is an email and a password (at least 8 characters). Every sign-in has a second step:

• Without an authenticator app — a 6-digit code comes to your email. It is valid for 10 minutes, and 5 wrong tries use it up; request a new one on the same page. The form sends itself as soon as all six digits are in.
• With two-factor authentication — a code from the app instead of the email code, or one of the backup codes.

Registration works the same way: after the form, a code comes to your email to confirm it.

The account page

The gear in the header opens Account settings: how many paid services you have (with Services, which leads to their list on Overview — see Your services on Overview), your email with a test email, the interface language, the password and two-factor authentication.

Change your password

1. On the account page, in the Password row, press Change password, type the new password (at least 8 characters, not the current one) and press Change password in the form that opens.
2. A confirmation code comes to your email; enter it on the next page.

The password changes only after the code, so nobody can change it from a session left open on someone else's computer. A notice about the change comes by email.

Forgot your password

1. On the login page press Forgot your password? and enter your email.
2. If the account exists, a code comes to that email (the page says the same either way, so it doesn't reveal who is registered).
3. Enter the code and a new password. You're logged in — but if two-factor authentication is on, the app code is asked for as well: a reset by email doesn't bypass it.

Two-factor authentication

With two-factor authentication, signing in takes a code from an authenticator app (Google Authenticator, Authy and others) instead of a code from your email. It is an independent factor: someone who gets into your mailbox still can't sign in.

Turn it on

1. On the account page, next to Two-factor authentication, press Set up, then Connect an app.
2. Scan the QR code with the app, or enter the key shown next to it by hand.
3. Enter the 6-digit code from the app and press Confirm and turn on.
4. Save the backup codes that appear (see below) and press I've saved the codes.

If the code isn't accepted, check that the time on your phone is set automatically: the codes depend on it.

Backup codes

Backup codes let you sign in when the phone with the app is lost. Each works once, and they are shown only once — write them down or keep them in a password manager. To get a new set, enter a code from the app under Regenerate backup codes and press New codes; the old codes stop working.

Turn it off

Under Turn off 2FA enter a code from the app or a backup code and press Turn off. From then on, sign-in asks for the email code again. A notice comes by email.

Lost the phone

1. Sign in with a backup code instead of the app code.
2. On the account page turn two-factor authentication off with another backup code, and set it up again on the new phone.

No phone and no backup codes — write to support from the account's email.

Automatic sign-out

After 30 minutes without activity you are signed out. The countdown in the header shows the time left (on narrow phone screens it is hidden); in the last minute it turns pink.

• Activity is opening pages and pressing buttons — not moving the mouse.
• The countdown is shared by all tabs: activity in one tab keeps the others signed in, and signing out in one signs out all.
• Pages that refresh themselves don't count as activity.
• After the sign-out the login page says why. Signing in takes you to Overview, not to the page you were on.

Interface language

Before you sign in, the EN | RU switch in the header changes the language of the site. Once you're signed in, the header has no switch: the language is chosen on the account page, in the Language row. The choice is saved to the account — it's used on every device you sign in from, in the dashboard, on the site and in this knowledge base, and for the emails we send you.

Test email delivery

On the account page, in the Email row, press Send a test email. If it doesn't arrive in a few minutes, look in the spam folder and add our address to your contacts — the sign-in codes come from the same address.