Your account can move money, read identity documents, or make other accounts — so until you set one up, this page is the only one that will answer. It takes about a minute and you need the phone you normally carry.
A second thing, as well as your password
A password is one thing, and it is the thing that gets read off a note, guessed from another site, or typed into a page that only looked like this one. A second factor is a six-digit code from an app on your phone that changes every thirty seconds. Somebody who has your password and not your phone gets nowhere.
Step one — put this key in an authenticator app
Google Authenticator, Microsoft Authenticator, Aegis, 1Password — any of them. Add an account by hand and type this key in, or open the link below on the phone itself.
Or open this link on the phone. Nothing is shown as a picture on purpose: a photograph of a secret ends up in a camera roll, and this one is worth as much as your password.
Step two — type back what the app says
This is what proves the phone actually has the key. Until it succeeds nothing has changed and your password still signs you in on its own.
Ten single-use codes, for the day the phone is lost, sold or reset. Each one signs you in once, in place of the six digits. They are not shown again — nothing here can recover them, which is the same reason nobody can steal them from us. Put them where you keep things that matter, not in the same phone.
Both, because either one on its own is something somebody else can be holding.
Where you are signed in
Every screen this account is signed in on. If you do not recognise one — a browser you do not use, a time you were not working — end it, and then change your password.
| Device | Signed in | Last used |
|---|
A session that has simply run out is not listed as ended — nobody did anything. Sessions signed before this was built have no row and cannot be listed; they last a day at most.
Your password
No rules about capitals or symbols. Length is what makes a password hard to guess, and rules are what make people write one on a sticky note — three unrelated words is easy to remember and hard to break.
Every screen this account is signed in on will be signed out, including this one. You will sign in again with the new password.
What this protects
Everything the console signs out: payouts, a rider's payee details, identity documents, other people's accounts, and erasing a customer. Those are the areas that make an account worth a second thing, and they are the ones this business can insist on.
If you lose the phone, use a recovery code. If you lose both, whoever runs the business can take your account's factor off — but they cannot read it, cannot copy it, and cannot use it. That is the point of it living on your phone.
Nobody with any role can turn your factor off from their own screen. Everything on this page acts on the account you are signed in as, and on no other.