Two-factor authentication

Add a second step to every login.

In the panel go to Settings > Security, in the app go to Settings > Two-factor authentication. Scan the QR code with an authenticator app (Google Authenticator, Authy, 1Password and similar) and enter the six-digit code to confirm. Save the backup codes: each one can be used once if you lose your phone. From then on, logging in asks for a code after your password. To turn it off, enter a current code on the same screen. If you are locked out, contact support; an administrator can reset 2FA on your account.

Too many login attempts

After ten failed password or 2FA attempts within fifteen minutes, further attempts from that address are refused for the rest of that window. Successful logins are not counted. Wait a few minutes and try again, or use "Forgot password" if you are unsure of your password.