Your account

Two-Step Verification

With Two-Step Verification on, logging in with a password takes a second step: the 6-digit code from an authenticator app, or a Passkey. Someone who learns your password still can't log in. Logging in with Google is not affected.

Two-Step Verification only applies to password login. If your account has no password and you only log in with Google, Settings doesn't offer it.

Turning it on with an authenticator app

1. Open the account menu at the top right, choose "Settings" and find "Two-Step Verification".
2. On the "Authenticator app" row, press "Set up". A QR code appears.
3. Scan the QR code with an authenticator app (such as Google Authenticator or 1Password). If you can't scan it, press "Can't scan? Enter the key manually" and type in the key.
4. Enter the app's current 6-digit code and your password, then press "Turn on two-step verification".
5. The screen lists 10 Recovery Codes. You won't see them again after leaving the screen, so save them in a password manager now with "Copy" or "Download .txt", or write them down, then press "I've saved them".

Turning it on with a Passkey

A Passkey lives on your phone, computer or hardware security key. To log in, you just unlock your phone or computer (fingerprint, face or screen lock).

1. On the "Passkeys" row in "Two-Step Verification", press "Add".
2. Give it a name you'll recognise (for example "My phone"), enter your password and press "Create passkey".
3. Follow your browser's or phone's prompts.
4. If this is your first second step, the screen lists 10 Recovery Codes. Save them as above.

You can set up an authenticator app and several Passkeys at the same time, and use any of them when you log in.

If Settings has no "Passkeys" row, this deployment's address isn't an HTTPS domain (for example it's opened by IP address or over http://), and browsers don't allow Passkeys there. Use an authenticator app instead.

Logging in

After you enter your password, the screen shows "Two-Step Verification":

• With an authenticator app: enter the app's 6-digit code. It's sent as soon as all 6 digits are in.
• With a Passkey: press "Use a passkey" and follow the prompts.
• With neither to hand: press "Use a recovery code instead", enter a Recovery Code and press "Verify". Each code works once, and after you log in the screen tells you how many are left.

If you don't finish within 5 minutes, or get it wrong too many times, you have to enter your password again. After resetting your password with "Forgot password", you still have to pass this step to log in.

Running out of Recovery Codes, turning it off, deleting a Passkey

In "Two-Step Verification" in Settings, press the button you need:

• Generate new codes (on the "Recovery codes" row): creates 10 new codes and cancels all the old ones.
• Turn off (on the "Authenticator app" row): removes the authenticator app.
• Delete (next to each Passkey): removes that Passkey.

A confirmation window opens: enter your password, then confirm it's you with a Passkey, a 6-digit code or a Recovery Code. If you have a Passkey, it's used by default; press "Use a code or recovery code instead" to type a code. Once the authenticator app and every Passkey are removed, Two-Step Verification is off and any remaining Recovery Codes are cancelled.

Lost your phone and have no Recovery Codes

If you can't use your authenticator app, a Passkey or a Recovery Code, you can't log in on your own. Ask the person who runs this deployment to turn off Two-Step Verification for you with the reset-mfa command (see "Turning off Two-Step Verification for a User" in the "Installation" chapter). Once you're back in, turn it on again.

Appearance

Open the account menu at the top right, choose "Settings" and find "Appearance". You can choose:

• The color theme: "Original green" or "Nord".
• Light or dark: "Match system", "Light" or "Dark". With "Match system", the screen follows your system when it switches to or from dark mode.

The dark mode button at the top right of the site's other pages, such as the Manual and the EULA, is the same setting: switching it there changes "Light or dark" to "Light" or "Dark".

Both choices are kept in this browser only. On another device or browser, choose them again. They don't affect other Members.

Deleting your account

Deleting your account cannot be undone. Before you do, download a Backup of each Household from "Household settings" → "Export".

1. Open the account menu at the top right and choose "Settings".
2. Scroll down to "Delete account". It lists what happens to each of your Households.
3. Type your email and press "Delete account".
4. If the screen says "Check your email", open the confirmation email and follow its link. The link works for 1 hour.
5. The page it opens lists what happens to your Households again. Press "Permanently delete account" to delete it.

If this deployment doesn't send email, step 3 deletes the account straight away, without a confirmation email.

What happens to your Households

• Households where you are the only Member are deleted with your account, along with all their data.
• Households with other Members stay, as if you had left. If you are the Custodian, the Member who joined earliest among those who stay becomes the Custodian.
• Expenses you recorded in those Households stay, so the Household's figures don't change. Their recorder shows as "Deleted member" and your email is no longer kept.

Once the account is deleted you are logged out and can no longer log in with that email. You can sign up again with the same email, but that creates a brand-new account that can't see your old Households.