Password Recovery

The password recovery feature allows you to securely reset your password and restore access to your account if you forgot it or suspect it may have been compromised.

Important for security

A password reset sets your new password and sends you a notification. It does not end sessions that are already open. If someone may have been signed in to your account, end those sessions on the Security page in your profile.

When to reset your password

It is recommended to use the password recovery feature in the following cases:

Forgot password — you cannot remember your account password
Suspected compromise — you believe someone may have learned your password
Suspicious activity — you noticed unfamiliar sessions or actions in your account
Used password on other sites — if any other site where you used the same password was breached

Note: Password reset is available for any registered email address, including accounts created with an email code or with Google.

How to reset your password

Open AUTH. The sign-in form with a one-time code is shown by default.

Open the password form

On the sign-in page, enter your email address and click Password next to the Code button. The email is checked first: if it is not valid, the password form does not open.

Open Forgot Password

Click “Forgot password?” below the password field. The “Forgot Password” page opens.

Enter your email

Enter the email address associated with your account. Make sure you enter the exact address you used during registration.

Click “Send Reset Code”

A 6-digit code is sent to your email address.

Tip: If the email doesn’t appear in your inbox, be sure to check your “Spam” or “Junk” folder.

Enter the code

On the same page, type the 6-digit code from the email in the “Enter Verification Code” section.

Enter a new password

Enter your new password twice for confirmation. The password must be at least 8 characters.

Click “Reset Password”

Press the Reset Password button. After a successful reset, you will be redirected to the login page.

Log in with your new password

Use your new password to log in to the system. Sessions that were already open on other devices stay active. To end them, open the Security section in your profile.

Password requirements

To ensure your account security, the new password must meet the following requirement:

Minimum length — at least 8 characters. Longer passwords are stronger.

Security tip

Use a password manager (e.g., 1Password, Bitwarden, LastPass) to generate and store strong unique passwords. This significantly increases security and eliminates the need to remember complex passwords.

Do not use:

Simple passwords like “password123” or “qwerty”
Personal information (name, date of birth, phone number)
The same password as on other sites
Character sequences (“12345”, “abcdef”)

Changing your password while signed in

If you are already signed in, you don’t need a code: change the password in profile settings. See Security. Changing the password there ends all sessions, including the current one, so you sign in again. If you suspect your account has been compromised, end the unfamiliar sessions first.

Important notes

Pay attention to important security aspects:

Session termination — a password reset does not end active sessions. End unfamiliar sessions on the Security page in your profile. Changing the password in your profile ends all sessions, including the current one
Code entry — always use the code from the most recent email. To get a new code, click “Resend Code” once the wait time ends
Two-factor authentication — two-factor authentication is not available in the current release; sign-in uses an email code, a password, or Google

Troubleshooting

Password reset email didn’t arrive. What should I do?

If you didn’t receive the password reset email:

Check your “Spam” folder — emails sometimes automatically end up there
Make sure the email is correct — verify that you’re entering the same address you used during registration
Wait a few minutes — email delivery sometimes takes time
Request the code again — click “Resend Code” on the reset page after the wait time ends
Check email filters — make sure your email provider isn’t blocking emails from our system

If the problem persists after all these steps, contact support.

The code doesn’t work or was not accepted

If the code you entered is rejected:

Make sure you’re using the code from the most recent email
Check that you typed all 6 digits correctly
If needed, click “Resend Code” after the wait time ends and use the new code

Tip: Don’t use codes from older emails.

I don’t have access to my email. How can I recover my account?

If you lost access to the email address associated with your account:

If you have other login methods:

Try logging in via Google (if it was connected to your account)

If there are no other login methods:

Contact support

The email address on an account cannot be changed in the app. Contact support to change it.

I suspect my account has been hacked. What should I do?

If you believe your account has been compromised:

Immediate actions:

End unfamiliar sessions — if you can still sign in, open the Security section in profile settings and end each suspicious session one by one. Then change your password
If you cannot sign in — reset your password with the password recovery feature, sign in with the new password, and end the unfamiliar sessions. A reset does not end sessions by itself
Check profile changes — make sure your email and other profile information haven’t been changed

Additional security measures:

Check other accounts where you used the same password
Change passwords on other sites if they matched
Check devices for malware
Contact support if you noticed suspicious activity

Prevention: Use unique passwords for each site.

How often should I change my password?

Modern security recommendations:

Regular changes without reason — not required:

Previously, it was recommended to change passwords every 30-90 days
Modern research shows this often leads to creating weaker passwords
It’s more important to have one strong unique password than to frequently change weak ones

When you must change your password:

You know or suspect that the password may have been compromised
A data breach occurred on a site where you used the same password
You used the password on an unsecured or public device
You received a notification about suspicious activity

Best practice:

Prefer a long unique password (12+ characters); the minimum is 8 characters
Use a password manager
Change your password only when there’s a specific reason

If you use a strong unique password, there’s no need for regular password changes without a reason.