Account security
An authenticator app, recovery codes, signed-in devices, your email and linked accounts.
Open Profile › Security. Some changes need a recent sign-in: Rondo then sends a code to your email to confirm it's you.
Authenticator app
A passkey already protects you. Turning on an authenticator app adds a second step to signing in with an email code, Google or Apple, so someone with your email still can't get in.
- Choose Turn on, and scan the code with an authenticator app (or type the key).
- Enter the code it shows.
- Save the recovery codes. Each works once instead of the app; they aren't shown again.
New recovery codes replaces the old ones. Turn off removes the second step.
Lost your authenticator?
On the sign-in screen, after the email code, choose Lost your authenticator?. Rondo emails you a code, and once you enter it, the second step is removed a week later. The wait stops a stranger with your email from doing the same.
Until then, signing in with the authenticator app or a recovery code cancels it, and so does Cancel it in Profile › Security. Rondo emails you when it's scheduled and when it's done.
Signed-in devices
Signed in on lists every device and browser with your account. Sign out ends one; Sign out everywhere else ends all but this one.
Change your email
Enter the new address and choose Change email. A code goes to the new address; entering it moves your account there, and the old address gets an email saying so.
Linked accounts
Link Google or Apple to sign in with them as well. Unlink removes one; signing in with an email code always works.