Password, 2FA and login sessions

Security settings are on the “Settings” page of your account dashboard. Here you can change your password, turn on two-factor authentication, view your sessions and delete your account.

In short. Turn on 2FA and save your recovery codes — they are shown only once. If you see an unfamiliar device in “Login sessions”, click “Log out of all devices” and change your password.

To open settings, click your avatar in the header and choose “Settings”.

Why you need a password

You don't need a password to sign in: you sign in with a code from your email, or via Google or Discord. The password confirms certain actions, such as “Log out of all devices”. If you placed an order as a guest, your password was sent to your email.

Steps: change your password

  1. Find the “Account Security” block and the “Password” item.
  2. Click “Change Password”. A form opens.
  3. Enter your current password in the “Your password” field.
  4. Enter a new password in the “New password” and “Repeat new password” fields.
  5. Click “Save”. Your new password takes effect.

Steps: turn on 2FA

  1. Install or open Google Authenticator, Authy or another authenticator app on your phone.
  2. In the “Two-factor authentication” block, click “Enable”. A QR code appears.
  3. Scan the QR code in the app. If that doesn't work, use the hint “Can't scan? Enter this key manually” and enter the key in the app.
  1. Enter the 6-digit code from the app in the “Enter the 6-digit code from your authenticator app” field.
  2. Click “Enable 2FA”. You will see the message “Two-factor authentication enabled!” and a list of recovery codes.
  3. Save the recovery codes in a safe place. Each code can be used once.
  1. Click “Done”. 2FA is now on.

Important. The recovery codes will not be shown again. Save them before you click “Done”.

Signing in with 2FA on

When you sign in, the site asks for an extra confirmation. Choose an option:

  • “App code” — 6 digits from your authenticator;
  • “Recovery code” — one of your saved codes;
  • “Reset 2FA” — a code is sent to your email, and once you confirm it, 2FA is turned off.

Tick “Remember this device for N days” so you don't have to enter a code on this device for a while. The number of days is shown in the sign-in window.

Steps: turn off 2FA

  1. In the “Two-factor authentication” block, click “Disable”. You will see the text “To disable 2FA, we will send a 6-digit code to your email”.
  2. Click “Send code to email”. The code arrives by email.
  3. Enter the code from the email. 2FA is turned off.

If you can't access your email, click “No access to your email? Enter a recovery code”. If you don't have recovery codes either, contact support.

Login sessions

The “Login sessions” block shows the last 10 devices: “Device”, “Browser”, “Location”, “IP”, “Last activity”. Your device is marked “Current”. To see IP addresses, click “Show IP addresses”.

Steps: log out of all devices

  1. Click “Log out of all devices”.
  2. Enter your current password. Active sessions in all other browsers and on all other devices are closed. Your current session stays open.

Steps: delete your account

  1. Find the “Delete account” block.
  2. Enter your username to confirm.
  3. Click “Delete account”. Your account is deleted permanently.

Important. Deletion cannot be undone. You will lose all credit funds and loyalty points.

FAQ

I lost the phone with my authenticator. How do I sign in?

Choose “Recovery code” or “Reset 2FA” — then a code is sent to your email.

I have neither my phone nor my recovery codes.

Use “Reset 2FA” via email. If you can't access your email either, contact support.

I see an unfamiliar device in my sessions.

Click “Log out of all devices”, change your password and turn on 2FA.

Can I change my account e-mail?

Not on your own. Contact support.

I don't have a password. How do I get one?

If you placed an order as a guest, your password was emailed to you after checkout. Otherwise, write to support.

Related articles