More on the platform

Account security (password change and reset)

Free

What it is

Password self-service, both doors. Signed in and know the current password: Settings > Security (/settings/security) changes it after the server verifies the current password against the stored one (a wrong current password is refused and nothing changes; the new password must be different from the current one; you stay signed in on this device). Forgot it: the Forgot password? link on the login page and the Forgot your current password? link on the Security page lead to /forgot-password, which emails a reset link that works once and expires in 30 minutes; /reset-password asks for the new password twice (at least 8 characters, the signup baseline). The reset request never says whether an email has an account, and repeat requests within a couple of minutes quietly wait for the first email. Two-factor authentication (an emailed 6-digit code at login) switches on at /security.

What it is for

changing a password safely or getting back into an account after forgetting one, without emailing support