Keeping your account secure

The Security section of your account page (reach it from the avatar menu) holds your password, sign-in protection, active sessions, and the two ways to take your work out or close the account.

Password and email

Change your password by entering your current one and the new one; this signs out your other sessions. Changing your email sends a confirmation link to the new address, and the change only takes effect once you follow that link, so a typo can never lock you out.

Two-factor authentication

Two-factor adds a code from an authenticator app on top of your password. To turn it on, select Set up, scan the QR code (or type the key) into your app, then enter a code to confirm. You are shown a set of recovery codes once: save them somewhere safe, as each one signs you in if you lose the app. When it is on, you can regenerate the recovery codes or turn it off; both ask for your password first.

After your password at sign-in, you are asked for a code. If you have lost both the app and your recovery codes, an admin can reset two-factor on your account.

Passkeys

A passkey signs you in with your device's own check (a fingerprint, face, or PIN) instead of a password, and skips the two-factor step. Add one with "Add a passkey" and follow your browser's prompt; name it so you can tell your devices apart. Removing a passkey asks for your password. On the sign-in page, "Use a passkey instead" signs you in with any passkey registered to the account.

Active sessions

The sessions list shows where you are signed in. Revoke any one of them, or sign out everywhere else at once, if you used a shared or lost device.

Export everything

Select "Prepare everything (.zip)" to build a single zip of everything you own: every universe, story, scene, entity, note, and uploaded image, as markdown with the images bundled in. The file is prepared in the background; it appears below the button when it is ready, and a bell notification tells you too. Reload the page if you do not see it yet, then select Download. This is the safety net to run before deleting your account.

Delete your account

Delete asks for your password, then deactivates the account at once and takes down anything you published. The full removal happens after a short grace period, during which an emailed link can cancel it and bring the account back. After the grace period everything is erased for good. Export first if you want to keep anything.