Keeping your account secure
Passwords, two-step sign-in, passkeys and signing out everywhere.
Updated September 30, 2026
Change your password
Open Settings → Security, enter your current and new password, and save. Changing your password signs you out on every other device.
Sign out of other devices
Lost a laptop or used a shared computer? Under Settings → Security → Active sessions, click Sign out of all other sessions.
Good habits
- Use a password manager and a long, unique password.
- Give team members their own logins with the lowest role they need. See Inviting your team.
- Your Ghost Admin login is separate. Protect it just as carefully.
Turn on two-step sign-in
- 1Open Settings → Security and, under Two-step sign-in, enter your password and click Set up two-step sign-in.
- 2Scan the QR code with an authenticator app such as Google Authenticator, 1Password or Microsoft Authenticator.
- 3Type the 6-digit code the app shows and click Turn on.
- 4Save your backup codes somewhere safe. Each one lets you in once if you lose your phone.
Sign in with a passkey
Under Settings → Security → Passkeys, click Add a passkey and confirm with your fingerprint, face or device PIN. Next time, click Sign in with a passkey on the login page. No password needed.
Forgot your password?
Click Forgot password? on the sign-in page and enter your email. We'll send a link to choose a new one. Resetting your password signs you out everywhere else.
Still need help? Contact the CoreTech team, or open Support in your dashboard.