Securing your account
Your account is yours rather than your employer's, and it stays with you when you change jobs. That makes it worth securing properly, and it takes a few minutes once.
Everything on this page is under Settings, Security, in your own account.
How you sign in
There are two ways in, and you can have both.
- A link by email. We send a link to your address, and following it signs you in. There is nothing to remember, and it is always available.
- A password. Optional, and at least eight characters. Setting one gives you a second way in, which helps when you cannot reach your email.
A password does not replace the email link. It sits alongside it.
Two-factor authentication
Two-factor authentication asks for one more thing after your link or password: a six-digit code that only you can produce. Someone who has your password, or who can read your inbox, still cannot get in.
Turn it on under Security and choose one of two methods.
- An authenticator app, such as Google Authenticator or Authy. Scan the QR code we show you, or copy the key printed underneath it if scanning is awkward. The app then produces the codes you sign in with.
- Text message. We send the code to your phone. This needs a phone number on your account, which you set under Contact details first. If you ask for another message there is a short wait before we send it.
Either way you confirm once with a six-digit code, and it is on from that moment. Turning it off later asks for a code as well, so nobody who borrows an open session can quietly switch it off.
Tip
When your organization requires it
Some organizations require two-factor authentication for everyone. If yours does, you are asked to set it up the next time you log in, before you can carry on.
If you belong to more than one organization, the strictest rule is the one that counts. If any one of them requires two-factor authentication, you set it up once and it then applies everywhere you log in, including the organizations that do not require it.
Proving it is you when you contact us
Under Security you will also find a Security token. It generates a single-use code, valid for thirty minutes, that confirms to our support team that you are who you say you are.
Generate one while you are on the phone with us, rather than keeping one ready. It is meant to be used and then gone.
The rest of your account
What your employer can and cannot see, how to get a copy of your data, and how to close your account altogether are on your account and your data.
On this page