Guide › Practical recipes

Protect your account

Your projects are confidential. Four habits protect them.

1. A password of its own

Choose a long password (at least 10 characters; a sentence of several words is ideal), used nowhere else. A password manager remembers it for you.

Settings › Security › Password.

2. Two-factor authentication

Settings › Security › Two-factor authentication › "Turn on": authenticator app or code by email. Write down the backup codes and keep them away from your phone.

3. Sessions

Settings › Security › Active sessions: close a device you do not recognise, or one you used once (a borrowed computer).

4. Alerts

A sign-in alert you did not cause: change your password, close the other sessions, turn on two-factor authentication.

An address change alert you did not ask for: open the cancel link received at the old address.

And a copy of your own

Rail › Versions › "Export the project (.zip)", from time to time, and keep the archive at home.

The details: Account and security.