Keep your account secure
Verify your email, use a strong password, protect sign-in with two-factor authentication, and review active sessions.
Sign in and verify your email
Use the account entry pages to sign up, sign in, resend verification, recover a password, or complete a two-factor challenge. A valid requested destination is kept after sign-in; otherwise you arrive at Links.
If a provider is unavailable, the page explains that state instead of implying a successful sign-in.
Two-factor authentication and recovery
In Settings, Security, follow the two-factor setup steps and store recovery codes somewhere safe. Recovery codes are shown only when the product provides them, so do not rely on a screenshot or browser history to retrieve them later.
Review sessions and sensitive actions
Security settings list active sessions and let you revoke sessions you no longer recognise. Password changes, API keys and two-factor changes can require a fresh credential proof. An expired session signs you out rather than accepting a stale proof.