Keeping your account secure

Passwords, two-step sign-in, passkeys and signing out everywhere.

Updated September 30, 2026

Change your password

Open Settings → Security, enter your current and new password, and save. Changing your password signs you out on every other device.

Sign out of other devices

Lost a laptop or used a shared computer? Under Settings → Security → Active sessions, click Sign out of all other sessions.

Good habits

  • Use a password manager and a long, unique password.
  • Give team members their own logins with the lowest role they need. See Inviting your team.
  • Your Ghost Admin login is separate. Protect it just as carefully.

Turn on two-step sign-in

  1. 1Open Settings → Security and, under Two-step sign-in, enter your password and click Set up two-step sign-in.
  2. 2Scan the QR code with an authenticator app such as Google Authenticator, 1Password or Microsoft Authenticator.
  3. 3Type the 6-digit code the app shows and click Turn on.
  4. 4Save your backup codes somewhere safe. Each one lets you in once if you lose your phone.

Sign in with a passkey

Under Settings → Security → Passkeys, click Add a passkey and confirm with your fingerprint, face or device PIN. Next time, click Sign in with a passkey on the login page. No password needed.

Forgot your password?

Click Forgot password? on the sign-in page and enter your email. We'll send a link to choose a new one. Resetting your password signs you out everywhere else.

Still need help? Contact the CoreTech team, or open Support in your dashboard.