Security e-mails about your account

We e-mail you whenever something that protects your sign-in changes, so that a change you did not make never goes unnoticed.

Which changes do you e-mail me about?

• Your password was changed.
• Two-factor sign-in was turned on or removed — an authenticator app was added to or removed

from your account.

• A passkey was added or removed.
• The e-mail address on your account was changed. We write to the new address and to the

previous one, because the previous address is the one somebody who took over your account does not control.

Each e-mail says what changed, when (in UTC) and the IP address the change came from. It arrives within a few minutes of the change.

Can I switch these e-mails off?

No. They are security notices, so they are always sent — a notice you could switch off is one somebody who got into your account could switch off too. They go only to you, never to the other people in your organisation.

I set my password when I created my account. Why did I not get one?

Setting your first password when you sign up is not a change, so it is not reported. Every change after that is.

I did not make this change — what do I do?

1. Reset your password straight away from the sign-in page (Forgot password?).
2. Turn on two-factor sign-in once you are back in.
3. Reply to the security e-mail. It goes to our support team, who will help you check your account.

How do I know an e-mail is really from us?

Every e-mail we send carries our name and logo at the top, and its button and links lead to your own dashboard's address. If in doubt, do not use the e-mail's links: open your dashboard yourself and check Settings.