Password & security

Use Password & security in Preferences to change a Zelares password and manage authenticator-app MFA for credentials or provider-only accounts.

Change your password

Open Preferences → Password & security, enter your current password, then enter and confirm a new password. Accounts without a local password must set one before they can change it; provider-only sign-in limitations are shown by the current form.

Set up authenticator MFA

1. Start authenticator setup from Password & security. Provider-only accounts first complete an explicit Google or GitHub reauthentication.
2. Scan the displayed QR code with your authenticator app, or enter the displayed setup key manually.
3. Enter the current authenticator code and submit it. MFA is not enabled until setup verification succeeds.
4. Store the recovery codes shown after successful setup securely. They are not shown again in plaintext.

Recovery codes and MFA changes

An unused recovery code can be used where the current proof flow accepts an authenticator or recovery code. To disable MFA or regenerate recovery codes, credentials accounts provide the current password and a factor code; provider-only accounts first complete a fresh linked-provider sign-in, then provide a factor code. Regenerating codes replaces the previous set, so store the new set securely.

Do not share passwords, authenticator setup keys, QR contents, recovery codes, or login codes. For related account guidance, see Your Account.