Security settings (MFA, passkeys)

Add a second factor with an authenticator app, or register a passkey and sign in with biometrics or a hardware key and no password at all.

If you turn off your authenticator while having no passkey registered, you will be asked to set MFA up again at the next sign-in. That is the intended behavior rather than a lockout.

Sessions shows where you are signed in, and lets you end a session you do not recognize.

Set up passkeys and authenticators on the platform's own hosts. They do not work on a custom domain.