Security
Two-factor authentication
A code from your phone, in addition to your password. Without it, a stolen password is enough on its own.
On since Wed Oct 07 2026. 0 recovery codes remaining.
You are nearly out of recovery codes. Turn two-factor off and set it up again to get a fresh set — or ask a user administrator to reset it if you cannot.
Your permissions require this, so it cannot be turned off: ledger:approve, payments:approve, users:edit, settings:edit, chart-of-accounts:edit.
Passkeys
Sign in with your fingerprint or Face ID instead of a password and a code. A passkey never leaves your device, and cannot be phished the way a typed password or code can.
Passkeys aren't available in this browser.
Password
Changing your password does not sign you out of this session.