Security

Go to Settings → Account → Security to manage your account password, two-factor authentication, and active sessions.

Password

The Password section shows whether password authentication is enabled for your account and, if so, how long ago the password was last changed.

• Set up password — appears when your account has no password (for example, you signed up with Google). Enter a new password of at least 8 characters; a strength indicator helps you pick a strong one.

• Change password — appears when password authentication is enabled. Enter your current password and a new password (min 8 characters). Check Sign out all other sessions to sign out every other device, extension, and API session at the same time.

• Disable — appears only when password authentication is enabled and your account is linked to a Google account. Enter your current password to confirm; afterwards you can only sign in using your Google account.

Workspace admins can disable password authentication for the entire workspace with the Disable password authentication toggle in Settings → Workspace → Members. Members must then sign in with Google — password login, invite signup, and password reset are disabled for that workspace.

Two-factor authentication

Zero supports two-factor authentication (2FA) with one-time codes from an authenticator app. Turn it on or off in the Two-factor authentication section of Settings → Account → Security.

• Enable — scan the QR code with your authenticator app, then enter the six-digit code it shows and click Confirm.

• Disable — enter your current authenticator code to confirm.

Active sessions

The Active sessions table lists every API key that is currently active with your credentials — your logged-in devices, browser extensions, personal API keys, and so on. For each session you see its Type, Created at, Expires at, and IP & Location; your current session is highlighted.

Click the sign-out button on any session to revoke it. Signing out your current session logs you out of Zero immediately.