# Passkeys, two-factor and sessions (/docs/team/account-security)

Account security settings are personal and apply to every workspace you belong to. Open **Settings → Security**.

## Passkeys [#passkeys]

Sign in with Face ID, Touch ID, Windows Hello or a security key, with no password needed. Passkeys are phishing-resistant.

1. Under **Passkeys**, click **Add passkey** and follow your browser's prompt.
2. Rename a passkey to tell your devices apart, or remove one you no longer use.

On the sign-in page, choose **Sign in with a passkey**.

## Two-factor authentication [#two-factor-authentication]

Two-factor authentication requires a code from your authenticator app when you sign in with a password.

1. Under **Two-factor authentication**, click **Turn on 2FA** and enter your **Password**.
2. Scan the QR code with an authenticator app such as 1Password, Authy or Google Authenticator, then enter the 6-digit code it shows.
3. Save your backup codes. If you lose your device, each code signs you in once.

To get new backup codes, click **Regenerate backup codes**. Your old codes stop working. To turn two-factor off, click **Turn off 2FA** and confirm with your password.

## Password [#password]

Under **Password**, enter your **Current password** and a **New password** of at least 8 characters, then **Update password**. Tick **Sign out of all other devices** to end your other sessions at the same time.

## Sessions [#sessions]

**Sessions** lists the devices signed in to your account, with browser, operating system and IP address. Sign out any device you don't recognize.

## Single sign-on [#single-sign-on]

Single sign-on (SSO) with Okta, Microsoft Entra ID, Google Workspace or any SAML or OIDC provider is coming soon.