Account & billing · 3 min read
Changing your email, password, and two-factor settings
Every account change is confirmed with a 6-digit emailed code. Here is exactly how each flow goes, and the org-account exception.
Where everything lives
It is all in Profile, under Settings: Account details holds your display name, email, and password; Security holds two-factor authentication. Every sensitive change is confirmed with a 6-digit code emailed to you, so keep that inbox reachable, and check spam if a code seems slow. Every code screen has a resend button.
One exception for organization accounts: if a school or company manages your account, your name and email belong to their roster and only your administrator can change them. Your password is always yours to change.
Changing your email
Enter the new address and your current password, and a 6-digit code goes to the new inbox, proving the address is really yours. Enter the code and the switch completes; use the new address the next time you log in.
If you signed up with Google or Microsoft and never created a password, the email cannot be changed yet, because it comes from the provider. Create a password first (the Account details panel shows the card), then change the email. Fair warning: the social sign-in matches accounts by email, so after the change it stops working for the old address.
Changing your password
Enter your current password and Corlova emails you a verification code. Enter the code plus the new password twice (8 or more characters) and the change lands.
Forgot the current password entirely? The log-in page has a forgot-password flow that works by emailed code too.
Two-factor authentication
Corlova's 2FA is email-based: with it on, logging in takes your password and a 6-digit code emailed to you. Turn it on under Security: press the enable button, enter the code it emails, done. Turning it off asks for your password.
If you also sign in with Google or Microsoft, note that those sign-ins skip the code by default, because the provider already verified you. A checkbox in the same Security panel makes the code required there too.