Passwords, two-factor and devices
Turn on two-factor authentication, and see every device your account is signed in on.
Two-factor uses a six-digit code from an authenticator app - 1Password, Google Authenticator, Authy, Microsoft Authenticator and the rest all work. You get ten recovery codes when you set it up, shown once, for the day you lose your phone.
The device list shows the browser and when it was last used. If you do not recognise one, end it and change your password.
Where to find this
The screens this topic describes.
Questions
-
I have lost my phone and my recovery codes.
Contact us at info@kwistech.ca. Recovery codes are stored one-way, so nobody here can read them back to you - re-establishing access has to be done carefully and by hand.
-
Why do you ask for my password to turn two-factor off?
So somebody who walks up to your unlocked laptop cannot quietly remove it.
-
Can I end the session I am using?
Not from the list - use Sign out for that. You can end every other session at once, which is the right move after using a shared computer.