---
title: "Security"
description: "Change your password, enrol an authenticator app or email codes as a second factor, and generate a fresh set of recovery codes."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.divelogic.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

import { AccountSetting } from "@/components/react/AccountScreens";

**Settings → Security** holds four sections. A fifth security operation, the
email address itself, sits on the Profile tab.

## Password

Enter your current password, then the new one twice, and save. Changing it signs
out every other session and leaves the one you are using alone.

## Two-factor authentication

An authenticator app, email codes, or both. Each factor has its own disable
control, and each asks for your password first.

1. Press **Enable** under **Authenticator app**.

2. The panel **Finish setting up your authenticator** opens with a QR code and a
   **Manual entry key** for apps that will not scan.

3. Enter the 6-digit code your app now shows. It submits on the last digit.

The factor is not on until that code is accepted; the panel says "Not enabled
yet" until it is. **Email codes** need no enrolment, because the address is
already proved: press **Enable**.

## Recovery codes

"Single-use codes that get you back in if you lose access to your factors", with
the number remaining. Codes can only be generated once a second factor is
enabled; with no factor, the account screen says "Enable a second factor first".

1. Press the generate button. If you already have a set, the app warns that
   "Replacing your recovery codes invalidates the current set" and asks for your
   password.

2. **Ten codes** appear, each eight characters shown as two groups of four.

3. Save them with **Download .txt** or **Copy all**. "These codes are shown
   once. Save or copy them now — DiveLogic cannot show them to you again."

4. Press **Done — I've saved them**.

Each code works exactly once, and the remaining count goes down as they are
used. Generating a fresh set invalidates every code in the old one, including
any stored elsewhere.

## Delete account

"Permanently delete your account and everything in it": sessions, the plans you
own, and your memberships.

## Email address

The address is on **Settings → Profile**, but it behaves like a security
operation. Enter your current password and the new address; a 6-digit code goes
to the **new** address, not the current one. Enter it, and the address changes,
the account stays verified, and every other session is signed out.

## Next

- [Creating your account](/start/account) shows a challenge from the other side.
- [Sync and offline](/account/sync) describes what is stored under the account
  you are protecting.

Source: https://docs.divelogic.ai/account/security/index.mdx