> ## Documentation Index
> Fetch the complete documentation index at: https://savemate.io/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Secure your SaveMate account with two-factor authentication and session management.

Manage your account security at [savemate.io/settings/security](https://savemate.io/settings/security).

## Password

### Update your password

1. Go to Security settings
2. Enter your current password
3. Enter and confirm your new password
4. Click **Save**

Use a strong, unique password that you don't use on other sites.

## Two-factor authentication (2FA)

Add an extra layer of security to your account with two-factor authentication using a TOTP authenticator app.

### Set up 2FA

<Steps>
  <Step title="Open security settings">
    Go to [savemate.io/settings/security](https://savemate.io/settings/security).
  </Step>

  <Step title="Enable 2FA">
    Click **Enable two-factor authentication**.
  </Step>

  <Step title="Scan the QR code">
    Open your authenticator app (Google Authenticator, Authy, 1Password, etc.) and scan the QR code displayed on screen.
  </Step>

  <Step title="Enter verification code">
    Enter the 6-digit code from your authenticator app to confirm setup.
  </Step>

  <Step title="Save recovery codes">
    Save the recovery codes in a secure location. These codes let you access your account if you lose your authenticator device.
  </Step>
</Steps>

<Warning>
  Store your recovery codes securely. If you lose both your authenticator device and recovery codes, you'll need to contact support to regain access to your account.
</Warning>

### Signing in with 2FA

When 2FA is enabled, the login flow requires:

1. Enter your email and password
2. Enter the 6-digit code from your authenticator app
3. Alternatively, use a recovery code if your authenticator is unavailable

## Browser sessions

The security settings page shows all active browser sessions on your account:

* **Current session** — Marked as your active session
* **Other sessions** — Shows browser, operating system, IP address, and last activity time

### Logout other sessions

Click **Log Out Other Browser Sessions** to immediately terminate all sessions except your current one. You'll be prompted to enter your password to confirm.

<Tip>
  If you suspect unauthorized access, log out all other sessions and change your password immediately.
</Tip>