How we protect your account

What we do

• We store your password encrypted: nobody, including us, can read it.
• After several failed attempts, we slow down sign-in attempts on your account for a while.
• Recovery links expire quickly and work only once.
• When you change or reset your password, we sign out all your other sessions.

What you can do

• Use a password you don't use anywhere else. A password manager makes that easy.
• If you think someone has got into your account, change your password: all their sessions end at once.
• Be wary of emails asking for your password: we will never ask for it.