Account security

Passwords

Passwords are stored as salted hashes. Change yours any time from Settings → Security; the form requires the current password and enforces a minimum length.

Sessions

Every sign-in creates a tracked session. Settings → Security lists all active sessions with device, IP and last activity, and lets you revoke any of them — including the device you are on. If you see a session you don't recognize, revoke it and change your password.

Sign in with Google

Google sign-in hands authentication to Firebase, so you get Google's account security. The platform only receives the identity you choose to disclose — never your Google password.