Back to Your settings

How do I change my password and secure my account?

In Settings change your password, review and sign out of active sessions, and set up two-factor authentication if your org enables it.

~3 min read · For all · Updated 1 Aug 2026

Quick answer

Go to Settings and open Security. There you can change your password, review your active sessions and sign out everywhere, and if your org enables it, set up two-factor authentication. Use a strong password, never share your account, and always sign out on shared devices.

How do I change my password?

  1. Open Security

    Go to Settings → Security.
  2. Enter current password

    Type your current password to confirm it is you.
  3. Set a strong new one

    Choose a long password with letters, numbers and symbols.
  4. Save

    Save it. Use the new password next time you sign in.

A strong password is long and unique. Never reuse a password from another website.

What are active sessions?

Active sessions are the places you are currently signed in, like your laptop and phone. The Security page lists them.

If you see somewhere you do not recognise, use sign out everywhere to log out of all devices at once. Then change your password to be safe.

How does two-factor authentication help?

Two-factor authentication (2FA) adds a second step at sign-in, usually a code from an app on your phone. Even if someone learns your password, they cannot get in without that code.

If your org enables 2FA, you can set it up on the Security page. It is one of the best ways to protect your account.

How do I stay safe day to day?

A few simple habits keep your account secure:

  • Do not share your account with anyone.
  • Sign out when using a shared or public computer.
  • Depending on your org, you may sign in with email or Google — use whichever your admin set up.

Small steps like these keep your personal HR data private.

Frequently asked questions

What makes a strong password?
Make it long, mix letters, numbers and symbols, and never reuse it from another site.
I sign in with Google — can I change my password here?
If your org uses Google sign-in, you manage that password in your Google account, not here.