How to keep your account safe

Your password and the browsers you're signed in on are on the security page. Open it from the menu under your name, at the bottom of the sidebar.

Change your password

1. Open the security page.
2. Under Password, enter your current password and a new one, at least 8 characters long.
3. Click Change password.

You stay signed in on this browser, and you're signed out on every other one: whoever knew your old password, or used one of your sessions, is out. You get an email saying that your password has changed.

See where you're signed in

Under Sessions, the security page lists the browsers you're signed in on: which browser it is and on which device, e.g. Chrome on Windows, when it signed in, when it was last used, and the IP address it was used from then. The one you're using now comes first, marked This browser, then the others, the last used first. The page shows the first 5: click Sessions to see all of them, a page at a time.

Browsers on the same network, e.g. at home, usually have the same IP address. A session with an address you don't expect may be someone else's.

A session lasts 30 days. Then you sign in again.

Sign out of other browsers

• To sign out of one, e.g. on a computer you don't use anymore, click the sign-out button at the end of its row.
• To sign out of all of them but this one, click Sign out everywhere else.

That browser has to sign in again with your password. If you don't recognize a session, sign out of it and change your password.

If you forgot your password

1. On the sign-in page, click Forgot your password?.
2. Enter your email address, and click Email me a link.
3. Within 60 minutes, open the link in the email and choose a new password.

Then you're signed out everywhere, and you sign in with the new password. The link works once: if it has expired, ask for a new one. You can ask for at most 3 links an hour.

The link only goes to your address once you've signed in with it, or set your password with it. Only you and administrators change your address, and a changed one gets no links until you've signed in with it once, so that nobody can take over your account by changing your address. If you were invited by an address you had no account with and haven't set a password yet, you get a new link to set it instead: your invitations wait on your home page once you're in.

If no email arrives, check your spam folder, or ask an administrator.