Password & email codes

You can sign in two ways: with a password, or with a one-time code we email you. You don't have to set a password at all, since a code always works, but a password makes signing in faster.

Sign in with a code

On the sign-in page, enter your email and we send a 6-digit code to it. Type the code in and you're signed in. The code is valid for 15 minutes, and there's a 60-second wait before you can request a new one.

The sign-in page on the site: email, password and the Sign in with an email code button
💡

An email code always works, even if you've set a password. It's your way back in whenever you forget the password.

Set or change your password

You set a password from your account page.

  1. Open the password field on your account page and choose Set password (or Change password if you already have one).
  2. Confirm it's you: enter your current password, or, if you've forgotten it, request a code to your email instead.
  3. Type your new password. It must be at least 8 characters, and you'll see the strength check as you type.
The password change form in the account area: the "Confirm it's you" step and the new password field

Once the new password is saved, every other session is signed out and this one gets a fresh token.

Breach check

When you set a password, we check it against known data breaches. This is done privately, so your password never leaves your device in full. The hint under the field says "At least 8 characters. We check it against known breached passwords." If the password turns up in a breach, the field warns you as you type: "That password appeared in a known data breach. Pick a different one." And if you submit it anyway, the form answers "That password has appeared in a public data breach. Please pick a different one."

📝

Forgot your password? You don't need to reset anything special. Just sign in with an email code, then set a new password from your account page.