Account & security
Passkeys and two-factor sign-in
Protect your account with a passkey, an authenticator app or email codes.
Updated October 6, 2026
Your account controls releases and payouts, so partner and staff accounts must use a second factor at sign-in.
Passkeys
A passkey signs you in with your device’s fingerprint, face or PIN — nothing to type and nothing that can be phished. Add one in Settings → Security → Passkeys; you can add one per device.
Authenticator app or email code
You can also use a six-digit code from an authenticator app, or a code sent to your email.
Recovery codes
Save your recovery codes somewhere safe. They are the way back in if you lose your device.
Sessions and activity
Settings → Security lists every device signed in to your account. Sign out one session, or all of them at once. Sign-ins and security changes are recorded in your account’s activity log.
Forgot your password?
Use Forgot password on the sign-in page; you’ll get a reset link by email.