Chapter 2 — Securing your account

2.1 Password

Change it under Settings → Password whenever you suspect it was exposed. Full steps: Change your password.

2.2 E-mail address

Your e-mail is your login and where codes and invoices go. To change it, see Change your e-mail and confirm the new address.

2.3 Two-factor authentication

Enable it under Settings → Two-factor authentication. Three methods are available: a one-time code by e-mail (OTP), an authenticator app (TOTP, with recovery codes) or a code on WhatsApp. Step by step: Enable 2FA.

2.4 WhatsApp

Save your number and opt in to receive invoices, alerts and codes on WhatsApp: WhatsApp notifications.

2.5 Sessions and access tokens

Settings → Sessions lists every signed-in device; revoke the ones you do not recognise. Access tokens give scripts limited access to your account — create them with the smallest permissions needed and delete unused ones (Access tokens).

2.6 Notifications

Choose which e-mails and WhatsApp messages you receive under Dashboard → Notifications. Security notices cannot be disabled.

Next: Chapter 3 — Ordering and paying.