Security

Two-factor authentication and session hygiene

Accounts can now enable TOTP-based two-factor authentication. Enabling 2FA revokes all existing sessions, and login requires the one-time code alongside your password. Password resets and recovery codes are handled server-side.