Security: password, email and sessions

Your password needs at least 8 characters, with one uppercase letter, one lowercase letter and one number. You can see whether it qualifies as you type.

To set or change it we first send you a code by SMS. That extra step is deliberate: if someone sat down at your unlocked phone, without that code they cannot lock you out of your own account.

Changing your email asks for two confirmations: a code to your current address and another to the new one. That way nobody can move your account to an address of theirs, and you cannot end up pointing at a mistyped address.

The phone number changes the same way, with a code by SMS.

Under Active sessions you see every device with your session open, and you can close one, or all the others at once, without logging yourself out of the one you are using.