Account security
Password, two-factor authentication, passkeys, signed-in devices and signing in with Google or Facebook.
Everything is in Settings → Security. These settings apply to your account, not to the studio.
Password
“Change password”: you enter your current password and a new one of at least 8 characters.
Two-factor authentication
With two-factor authentication on, signing in needs your password and a second step:
- Choose “Authenticator app (TOTP)”, for example Google Authenticator or 1Password.
- Scan the QR code (or enter the key manually) and confirm with a code from the app.
- Save your recovery codes. We show them only once, and each one works one time. You can generate a new set after entering your password; the previous set stops working.
A code sent by email is the backup method. A trusted device skips the second step for 30 days. Turning off two-factor authentication requires your password.
Passkeys
A passkey or security key (YubiKey, Touch ID, Windows Hello) is the most convenient and most secure second step. Enter a name for the key and click “Add key”. When signing in, you choose it as “Security key or Passkey”.
Signed-in devices
The “Active sessions” list shows where you are signed in. You can sign out a single device next to it, and all devices except the current one with “Sign out other sessions”. Do this if you lose your phone or signed in on someone else’s computer.
Connected accounts
In “Connected accounts” you link or unlink signing in with Google and Facebook. An account created through Google or Facebook has no password in Flyp; when deleting the account, you then confirm with a code from your email.