Securing your account
Enable MFA, manage active sessions, and review your personal security audit log.
Loading article…
Open your profile menu (bottom of the sidebar) → Security, or go to /user/security. This page covers multi-factor authentication, sessions, and your personal audit history.
Team-level “who did what” lives under Team → Security — see Audit log.
Multi-factor authentication (MFA)
Enable MFA
- Under Multi-Factor Authentication (MFA), choose Setup MFA.
- In the Setup MFA dialog, scan the QR code with an authenticator app, or copy the secret and enter it manually.
- Enter the 6-digit verification code from your app and submit.
- Store any recovery codes the product shows afterward offline — they are shown once.
On the next sign-in, EmailGuard will ask for an authenticator code (or a recovery code).
Disable MFA
Disable from the same page when you can still pass an MFA challenge. If you lose both your authenticator and recovery codes, contact support — the product cannot invent new codes for you from this guide.
Active sessions
The Active Sessions card lists devices and browsers that currently hold a valid session (browser/OS, signed-in time, last active).
- Choose Revoke on any session you do not recognize.
- Use Sign out other devices to end every session except the current one.
Personal audit log
Below MFA and sessions, summary cards (total events, login events, failed actions, unique IPs) and Audit Log History list account-level events.
For action name meanings, see Audit log events. For how to read columns on the team log, see Audit log.