> ## Documentation Index
> Fetch the complete documentation index at: https://docs.everywealth.com.au/llms.txt
> Use this file to discover all available pages before exploring further.

# Account security

> Manage your password, two-factor authentication and recovery codes.

Below **Security** in Settings, use **Profile** to update your name. The separate **Legal** card lets you review the agreements you have accepted.

## Change your password

Open your personal **Settings** and select **Change password** in the **Security** section. A centred window opens with three steps across the top. The highlighted step shows where you are, and ticks mark completed steps.

1. Enter your **Current password**, then select **Continue**.
2. Enter a **New password** of 12–128 characters, then enter it again in **Confirm new password**. Choose a long, unique passphrase that is different from your current password. Select **Continue**.
3. Enter the six-digit **Authenticator code** from your authenticator app.
4. Select **Change password**.

Use the eye button beside a password to **Show password** or **Hide password** while checking your entry.

Use **Back** to review an earlier step. Select **Cancel** or close the window to leave without changing your password; your entries are cleared when you close it. While the change is being saved, wait for it to finish.

You must have two-factor authentication enabled. If it is not enabled, select **Set up two-factor authentication** first. A trusted device still needs a fresh authenticator code to change a password.

After the change, the password window closes and a **Password changed** confirmation opens. Select **Done** to return to Settings. Your current browser stays signed in and your other sessions are signed out. Use your new password the next time you sign in.

## Manage two-factor authentication

The **Security** card lists **Change password** first, followed by **Two-factor authentication** and **Backup codes**.

Select **Manage two-factor** to open your two-factor settings. If protection is inactive, select **Set up two-factor authentication** to connect an authenticator app.

If protection is active, the window shows a **Current password** field and **Disable two-factor** action. Two-factor authentication is required for your account, so you will need to set it up again to continue using the app after turning it off.

## Regenerate backup codes

1. Select **Regenerate codes** beside **Backup codes** in the Security card.
2. Enter your **Current password**, then select **Regenerate codes** in the window. Your previous backup codes will stop working.
3. Download, copy or write down the new codes and keep them somewhere private, such as your password manager. These are also called recovery codes; each code can only be used once.
4. Tick **I’ve saved my recovery codes somewhere secure**, then select **Done** to close the window.

You need two-factor authentication enabled to regenerate codes. Before generating them, you can select **Cancel** to leave without replacing your codes. Once the new codes appear, save them before closing; you cannot view that set again later.

## Password change emails

EveryWealth sends a security email to your account email address after your password changes. It confirms when the change happened and explains what to do if you did not make it. The email never contains your password or authenticator code.

If the confirmation email cannot be sent, Settings tells you that your password has still changed.

If you receive a password change email for a change you did not make, contact [EveryWealth support](mailto:support@everywealth.com.au) straight away.

## If you cannot change your password

* Check that the new passwords match and that your current password is correct.
* If a code has expired or already been used, wait for a new code in your authenticator app and try again.
* After several attempts, wait five minutes before trying again.
* If you cannot remember your current password or access your authenticator app, contact support for help.