Account security
Change your password and email, turn on two-factor authentication, use recovery codes, sign in with Google and sign out other devices.
Your login details live in Dashboard → Settings, and extra protection lives in Dashboard → Settings → Security. This guide covers both.
Change your password
- Go to Dashboard → Settings and find Password.
- Enter your Current password.
- Enter a New password and type it again in Confirm new password.
- Tap Update password.
You stay logged in on this device and are signed out everywhere else.
Forgot your password?
On the log-in page, tap Forgot password?, enter the email you signed up with and tap Send reset link. The link expires in 30 minutes and works once. Nothing arrived? Check your spam or promotions folder. If reset by email isn't available, contact support from the email you signed up with via Contact.
Change your email
- Go to Dashboard → Settings → Email.
- Enter the new Email address and your Current password.
- Save.
Your email is used to log in and for account emails.
Two-factor authentication
Two-factor authentication adds a 6-digit code from an authenticator app to every login.
- Go to Dashboard → Settings → Security.
- Under Two-factor authentication, start setup and enter your Current password.
- Scan the QR code with your authenticator app. Can't scan it? Copy the setup key instead.
- Enter the 6-digit code from the app to turn it on.
- Save your recovery codes, then tick I saved these codes.
Once it's on, other devices are signed out. From then on you'll enter a code from your app after your password.
Recovery codes
Recovery codes are one-time codes that let you log in if you lose your authenticator app. Each code works once. When you're running low, QKAP warns you.
To get a fresh set, open Recovery codes on the Security page and create new ones with your current password. You'll get 10 new codes, and every code you saved before stops working.
Turn off two-factor
On the Security page, turn it off with your current password and a code from your app. Lost your phone? Use a recovery code instead. Logging in then needs only your password, and your recovery codes stop working.
Sign in with Google
Under Continue with Google on the Security page, tap Connect Google. After that you can log in with Continue with Google instead of typing your password. Two-factor authentication still applies.
To stop, tap Disconnect Google.
Tip: If you signed up with Google, you don't have a password yet. Set one under Dashboard → Settings → Password with Set password. You need a password to change your email or two-factor settings.
Active sessions
Active sessions on the Security page lists the devices and browsers logged in to your account. Sign out any you don't recognise, or tap Sign out all other devices.
Team members and security
Each team member has their own login and their own security settings. Nobody needs your password to help with your pages. See Team and roles.
Common questions
I lost my phone and my recovery codes. What do I do?
Contact support via Contact from the email address you use to log in so we can find your account.
Does changing my password sign me out?
Only on other devices. You stay logged in where you changed it.
Can I use Google and a password together?
Yes. Connect Google on the Security page and keep your password. You can log in either way.