Account and security
Questions about the account's own state — passwords and recovery, verification methods, sessions, and the order to follow when someone else has used your account.
This category covers "the account itself": my password, my verification methods, which devices I am signed in on, someone else using my account. None of it involves a specific application — only the relationship between you and your account.
Questions
| Question | Page |
|---|---|
| I forgot my password, or the reset email never arrived | Password and recovery |
| Which verification methods exist, why keep two, how recovery codes work | Verification methods |
| Which devices am I signed in on, how to kick one off | Sessions and devices |
If someone else used your account
Follow this order; do not skip steps:
- Revoke every session you do not recognise — get them out first, otherwise anything you change later can be synced or stolen;
- Remove verification methods you no longer use — especially passkeys or authenticators you do not recognise;
- Check authorized applications — revoke unfamiliar ones; their tokens die at the same time;
- Reset the password — last, because changing it usually invalidates current sessions, which would kick you out too.
Boundaries
| Symptom | Belongs here | Does not |
|---|---|---|
| Password, verification methods, sessions, devices | Yes | — |
| Asked to sign in again, asked to verify once more | Sign-in and verification | — |
| An application asking for authorization repeatedly | Authorization and permissions | — |
FAQ overview
The FAQ is split into four categories (account and security, sign-in and verification, authorization and permissions, integration and debugging), plus the lookup order by symptom, error code and field.
Password and recovery
Forgot your password, the reset email never arrived, still cannot sign in after resetting, and password policy questions.