who you are
- user
- —
- permissions
- —
- session ends
- —
Permissions are fixed on the session when you sign in. They do not widen if a key is widened later.
account security
two-factor —
A password alone can be phished or reused. This asks for a six-digit code as well.
Add this secret to your authenticator app, then enter a code to finish. Two-factor is not on until you do.
On a phone you can open this link instead of typing it.
Recovery codes — shown once. Store them somewhere other than the phone holding your authenticator; they are the only way back in if you lose it.
password
Changing it signs out every other browser and program session — which is the point if you are changing it because it leaked. This one stays signed in.
where you are signed in
Every live session on this account. If one is not you, end it — and then change your password, because whoever has it got in somehow.
| signed in | from | ends | issued by |
|---|
API keys
For programs. A key signs each request; it cannot create or revoke keys. The API reference has the signing scheme, the endpoints and the error codes.
| label | permissions | created | last used | status |
|---|
This secret is shown once and cannot be recovered. Copy it now.