Security and sessions

Account settings → Profile holds your identity, password, connected accounts and the security controls below, with a Recent activity list at the bottom.

Two-factor authentication

Turn on TOTP and your account needs a six-digit code from an authenticator app as well as a password.

When you enable it you are shown backup codes. Save them somewhere safe:

They will not be shown again. Each code can only be used once.

Disabling 2FA requires a current code, so a stolen session cannot switch it off.

Active devices

Every device signed into your account is listed under the account's security settings. The one you are on is marked This device, and any other one can be signed out from its menu.

Worth doing if you have signed in somewhere you no longer control. Signing a device out is immediate.

Connected accounts

Sign-in providers linked to your account. Note that these are how you sign in to CubeMind. They have nothing to do with the game accounts your clients play as, which are a separate thing entirely.

Password

Set or change it here. Verification and security emails are always sent for these changes and cannot be turned off.