Registration now sends a 6-digit verification code to your email, and you can reset your password yourself using the same kind of code. General Settings shows your verification status.

Codes are stored as SHA-256 hashes and expire after 10 minutes. You can request a new one after 60 seconds, and an incorrect code locks after 5 attempts.

On mobile, code fields open a numeric keypad and support one-time code autofill. Authentication pages also now work with password managers.

Learn more in the authentication guide.