Account security
Protect your account with two-factor authentication, backup codes, session control, and safe password and email changes.
Last updated July 14, 2026
Your account holds your assistant, agents, connected channels, and history, so it is worth locking down. This page covers everything that keeps it secure: turning on two-factor authentication and choosing a method, saving backup codes, reviewing the devices signed in to your account, and safely changing your password or email address.
Two-factor authentication
Two-factor authentication (2FA) adds a second step after your password, so a stolen password alone is never enough to get in. Praxivara offers three methods, and you can enable more than one and pick which to use at sign-in.
| Method | Best for | Trade-off |
|---|---|---|
| Authenticator app | The strongest protection | Requires installing an app |
| Text message (SMS) | The quickest to set up | Codes can be delayed or affected by carrier issues |
| No phone or extra app needed | Only as secure as your inbox |
Authenticator app
An authenticator app generates a fresh six-digit code every 30 seconds. You will need a free app such as Google Authenticator, Authy, Microsoft Authenticator, or the authenticator built into 1Password.
Go to your account's Security settings and choose to add an authenticator app.
In your authenticator app, add a new account and scan the QR code Praxivara shows you. If you can't scan, enter the setup key manually.
Type the current six-digit code from your app to verify the connection. Once it matches, the authenticator is active.
Store the one-time backup codes Praxivara shows you somewhere safe, in case you ever lose access to your phone.
If you get a new phone, move your authenticator accounts over before wiping the old device, or keep your backup codes handy so you can sign in and re-enroll. If a code is rejected, check that your phone's clock is accurate (turn on automatic date and time) and enter the code quickly, since it changes every 30 seconds.
Text message (SMS)
With SMS two-factor authentication, Praxivara texts a one-time code to your phone each time you sign in. It is the fastest method to set up because there is no app to install.
Go to your Security settings and choose to add text message (SMS) verification.
Add the mobile number where you want to receive codes, including the country code.
We send a code to that number. Enter it to confirm the number is yours and activate SMS 2FA.
Store the one-time backup codes in case your phone is ever unreachable.
If a text is slow to arrive, wait a moment and request a new one, and check that your phone has signal and the number on file is correct. To change your number later, update it in Security settings and verify the new one with a test code.
Email two-factor authentication sends a one-time code to your inbox each time you sign in. It is a good choice if you would rather not rely on a phone number or a separate app, and it works anywhere you can check your email. Because these codes land in your inbox, make sure the inbox itself is protected with a strong password and its own two-factor authentication.
Go to your Security settings and choose to add email verification.
Praxivara sends a code to your account email address. Enter it to activate email 2FA.
Keep the one-time backup codes somewhere safe as a fallback.
Codes are single-use and expire after a short time, so always use the most recent one. If an email doesn't arrive, check your spam or junk folder, make sure you're looking at the inbox for your Praxivara account email, and request a new code. Email codes always go to your current account email, so if you change your address, codes follow the new one.
Signing in with 2FA
After you enter your password, Praxivara asks for your second factor: the current code from your authenticator app, a texted code, an emailed code, or a backup code. If you have more than one method enabled, you can pick which one to use on the two-factor screen.
Backup codes
Backup codes are single-use codes that let you sign in when your usual second factor isn't available, for example if your phone is lost, dead, or out of signal. Praxivara gives you a batch of them when you enable any form of 2FA.
Store your backup codes where you can find them but others can't. A password manager is ideal. Avoid leaving them in a plain note on the same phone you use for 2FA, because if that phone goes missing, so do the codes. Each code works only once, so cross it off your list after you use it.
To sign in with one, enter your email and password as usual, choose the option to use a backup code instead of your normal method on the two-factor screen, and type in an unused code. You can regenerate a fresh set anytime from Security settings; doing so invalidates the old set, so update wherever you've stored them. Codes stay valid until they're used or until you regenerate a new batch.
Active sessions and devices
Your active sessions show every device and browser currently signed in to your account. Open Security settings to see the list; each entry gives enough detail to recognize your own devices and to notice anything that isn't yours.
To cut off access, find the session you don't recognize or are simply done using, such as a shared or public computer, and sign it out. That device will need your password and your second factor to get back in. Signing out other devices never affects the session you're currently using.
Whenever your account is signed into from a new device, Praxivara sends you an alert with details about the login. If it was you, no action is needed. It's also good practice to sign out sessions on borrowed computers from your own device afterward, so you never have to remember to log out there.
Setting or changing your password
A strong password is your first line of defense, whether you're setting one for the first time or rotating an old one.
Go to the Account section and find the password option.
Enter your current password to verify your identity before making a change.
Choose a strong new password and save. You'll stay signed in on this device.
Use a long, unique passphrase and store it in a password manager. Length beats complexity, and you should never reuse a password from another site.
If you signed up with Google, you can add a password so you're able to sign in with your email and password as well. This is handy as a backup way in, and once set, both sign-in methods work.
If you've forgotten your password, you don't need to be signed in to fix it. On the sign-in page, choose Forgot password and enter your account email. We email you a secure reset link that expires after a short window; follow it, choose a new password, and sign in.
Changing your email address
Your email address is how you sign in and where Praxivara sends important account and security messages. You can change it whenever you need to, and we verify the new address before switching it over.
Go to the Account section of your settings and find the email field.
Type the email you'd like to use. Praxivara checks that it's a valid, deliverable address.
We send a message to the new address. Confirm it to finish the change. Your old address keeps working until you do.
Your email is connected to your entire account, so updating it carries across everything automatically: sign-in, notifications, billing receipts, your Praxivara Mail identity, and your connected channels. You don't need to reconfigure any of it, and your data, agents, and history stay exactly as they were. After the change, use the new address the next time you sign in, and update it in your browser if you have a password saved there.
If your account uses Google sign-in, your email comes from your Google account. To change it, either update it on the Google side or set a password so you can sign in with an email and password directly.
If the verification message doesn't arrive, check your spam folder, confirm you typed the address correctly, and request it again from Account settings; the links expire after a while, so use the most recent one. Each account needs a unique email, so if the new address is already in use, sign in to that account instead or choose a different email.