Secure your access
Use a unique password and, if available for your account, add an authenticator code to password sign-in. These controls are under Account → Security. They do not change permissions on the instance.
Change your password
- Open Account → Security.
- Enter your current password, then enter the new password twice.
- Choose Change password.
The new password must contain at least eight characters. If the change fails, check the error and your current password before trying again. This changes your Elowen password; Microsoft sign-in remains governed by your organization's policy.
Enable two-step verification
Two-step verification adds a six-digit authenticator code to password sign-in. The controls are hidden for SSO-only accounts. If an older account has both Microsoft and a password, sign in with the password once first. Microsoft sign-in continues to follow your organization's policy.
- Under Account → Security, choose Enable two-step verification and enter your current password.
- Scan the QR code with an authenticator app, or copy the Setup key if scanning is unavailable.
- Enter the current six-digit code and choose Confirm and enable.
Keep the setup key private. It appears only during setup; if setup expires or you leave or cancel, start again to get a new key. After enabling, the next password sign-in asks for a code. Use a fresh code and keep any leading zero.
Review signed-in sessions
In the same section, review each session's device, sign-in method, start and expiry. Choose Revoke session for a session you no longer use, then confirm. Revoking the current session signs you out; revoking another session briefly reconnects the account's other browser connections. API tokens and paired computers are not changed.
Understand recovery
Disabling two-step verification requires a new, unused authenticator code and signs out every browser session, including the current one. There are no recovery codes or password bypass. If you lose the authenticator, another administrator must independently verify your identity and reset the factor under Users → Account. A lone administrator should arrange another administrator or a usable Microsoft sign-in before enabling it.
For profile and other personal settings, see Configure your account; the longer Account preferences reference covers the remaining controls.