Your account security
Change your password, add passkeys, turn on an authenticator app, save backup codes, add recovery emails, and sign out of sessions.
Your account security is in AjustesCuentaSeguridad ("Settings > Account > Security"). You can also get there from your avatar menu with «Seguridad» ("Security"). The screen has six sections, each with a chip that says how it stands: green for what already protects you and amber for what's worth setting up.
The sections and their status
What you sign in with. The status says «Contraseña» (“Password”) or «Contraseña y código» (“Password and code”).
What you can do: Change your password and turn the one-time code on or off.
Your fingerprint, Face ID, or your device's unlock. It says «Ninguna» (“None”; in amber, «Recomendado», “Recommended”) or how many you have.
What you can do: Create, rename, or delete passkeys.
A six-digit code that changes every 30 seconds. It says «Activada» (“On”) or «Sin configurar» (“Not set up”).
What you can do: Turn it on, replace it, or remove it.
To sign in if you lose your phone and your passkey. It says how many you have left «sin usar» (“unused”) or «Sin códigos» (“No codes”). It only appears if you have a passkey or an app.
What you can do: Generate new codes.
It says «Ninguno» (“None”) or how many you have, for example «1 de 3» (“1 of 3”).
What you can do: Add up to 3 and remove them.
Where your account is still open and where we don't ask you for a code.
What you can do: Sign out of sessions and forget devices or networks.
Before each change: «Confirma que eres tú»
Changing the password, adding or removing passkeys, turning the app on or removing it, generating codes, changing code sign-in, adding or removing recovery emails, and forgetting devices are sensitive changes. Before you make them, the «Confirma que eres tú» ("Confirm it's you") window opens: «Este cambio toca la seguridad de tu cuenta, así que lo pedimos otra vez.» ("This change affects your account's security, so we ask again.").
You can confirm with «Usar mi passkey» ("Use my passkey"), «Usar la app de autenticación» ("Use the authenticator app"), or «Enviar un código a mi correo» ("Send a code to my email"). When you're done you see «Listo, eres tú» ("Done, it's you") and «Seguimos con lo que ibas a hacer.» ("Let's continue with what you were doing.").
If you choose the email code, the email says exactly what you're about to change, for example «Vas a quitar una passkey» ("You're about to remove a passkey"). If you get one like that and you weren't going to make that change, someone else has your session open: change your password immediately.
Change your password
Tap «Cambiar» ("Change") in «Contraseña» ("Password")
While we check, the button says «Comprobando…» ("Checking…"). If needed, confirm it's you.
Fill in the fields
«Contraseña actual» ("Current password"), «Nueva contraseña» ("New password"; at least 8 characters), and «Repite la nueva» ("Repeat the new one").
Decide whether to sign out of your other sessions
With «Cerrar mis otras sesiones» ("Sign out of my other sessions") checked, when you save you're signed out on all your other devices.
Tap «Guardar» ("Save")
You see «Contraseña cambiada.» ("Password changed.") or «Contraseña cambiada. Cerramos tus otras sesiones.» ("Password changed. We signed out your other sessions.").
One-time code
In «Acceso», the «Código de un solo uso» ("One-time code") switch lets you sign in with a code sent to your email instead of the password. You see «Acceso con código activado.» ("Code sign-in turned on.") or «Acceso con código desactivado.» ("Code sign-in turned off."). It can't be turned on if you already have a passkey or an authenticator app.
Passkeys
Give it a name
In «Nueva passkey» ("New passkey"), type a name to recognize it. If you leave it empty, we use the device's name.
Tap «Crear passkey» ("Create passkey")
Your device asks for your face, your fingerprint, or the PIN. Meanwhile, you see «Sigue las indicaciones de tu equipo» ("Follow your device's prompts").
Done
You see «Passkey creada» ("Passkey created") and «Passkey guardada.» ("Passkey saved."). Next time you sign in, your device will offer it to you.
To remove one, use «Eliminar passkey» ("Delete passkey"). You'll see «Passkey eliminada.» ("Passkey deleted.").
Authenticator app
Tap «Activar» ("Turn on")
Read «Antes de activarla, dos cosas» ("Before you turn it on, two things") and tap «Entiendo, continuar» ("Got it, continue").
Scan the code
In «Escanea el código con tu app» ("Scan the code with your app"), open your app (for example Google Authenticator or Apple Passwords) and point the camera. If you can't scan, copy the key with «Copiar» ("Copy") and type it by hand. Tap «Ya la agregué a mi app» ("I added it to my app").
Enter the six-digit code
It's checked automatically when you type the sixth digit. If it matches, you see «Correcto.» ("Correct.").
Save your backup codes
Your codes appear. Save them with «Copiar», «Descargar PDF» ("Download PDF"), or «Imprimir» ("Print"). Until you save them, the button says «Copia, descarga o imprime primero» ("Copy, download, or print first"); afterward it changes to «Ya los guardé» ("I saved them").
With the app active you can use «Reemplazar» ("Replace"; the current app and its backup codes stop working) or «Quitar» ("Remove"; «App de autenticación quitada.», "Authenticator app removed.").
Backup codes
Each code works once. With «Generar nuevos» ("Generate new ones"; or «Generar códigos», "Generate codes", if you don't have any) you create another batch and the previous ones stop working.
Recovery emails
A second email you can reach even if you lose access to yours. If you try to recover your account from a location we don't know, we send the code to that other address before letting you in.
Enter the email
In «¿A qué correo?» ("Which email?") type the address and tap «Enviarme el código» ("Send me the code").
Enter the code
That email receives «Confirma este correo» ("Confirm this email"). Enter the code. If it didn't arrive, tap «No me llegó, reenviar» ("It didn't arrive, resend").
Done
You see «Correo confirmado» ("Email confirmed"). In the list, each email shows «Confirmado» ("Confirmed") or «Le falta el código» ("Code pending").
To remove one, use «Quitar correo» ("Remove email"). You'll see «Correo quitado.» ("Email removed.").
Sessions and devices
- At the top, «Este equipo» ("This device") shows where you're looking from right now.
- The notice says: «Si crees que alguien entró a tu cuenta, cambia primero la contraseña y cierra las sesiones después. Al revés no sirve.» ("If you think someone got into your account, change the password first and sign out of the sessions afterward. The other way around doesn't work.").
- Below you see your open sessions and you can sign them out. For security, the list only appears if you signed in recently. If not, you'll see «Por seguridad, la lista de sesiones abiertas solo se muestra si iniciaste sesión hace poco.» ("For security, the list of open sessions is only shown if you signed in recently.") and the «Volver a iniciar sesión» ("Sign in again") button, which signs you out and brings you back here when you sign in again.
- «De confianza» ("Trusted") lists the devices and networks where we don't ask for a code. Each device says «De confianza» or «Conocido» ("Known"), the location, and the date; each network says when it expires. Use «Olvidar» ("Forget") on one or «Olvidar todos» ("Forget all"). You'll see «Volveremos a pedir confirmación en todos tus dispositivos.» ("We'll ask for confirmation again on all your devices.").
Paused changes
To protect your account, some changes are paused for a while. The control looks disabled with an amber notice:
- «Cambiaste tu contraseña hace poco. Para proteger la cuenta, este cambio se puede hacer en…» ("You changed your password recently. To protect the account, this change can be made in…") and the time remaining.
- «Detectamos muchos intentos o cambios de seguridad seguidos. Para proteger la cuenta, los cambios sensibles quedan pausados…» ("We detected many security attempts or changes in a row. To protect the account, sensitive changes are paused…") and the time remaining.
Wait that long. There's no way to skip the pause.
The usual case
Something doesn't work the first time
You change phones
If your authenticator app was on the old phone, use «Reemplazar» from the new one. Your previous backup codes stop working.
Worst case
You think someone got into your account
Change your password with «Cerrar mis otras sesiones» checked, review «Sesiones y dispositivos», and use «Olvidar todos». Then review My activity.
Special case
A change is paused
The amber notice appears with the time remaining. Come back when it's over.
Errors and how to fix them
What you see · Security
«Vuelve a confirmar que eres tú para hacer este cambio.»
Confirm it's you again to make this change.
What to do. Confirm with your passkey, your app, or the email code and repeat the change.
What you see · Security, Password
«La contraseña actual no coincide.»
The current password doesn't match.
What to do. Check your current password. If you don't remember it, sign out and use "Forgot password?".
What you see · Security, Password
«La nueva contraseña tiene que ser distinta de la actual.»
The new password has to be different from the current one.
What to do. Choose a different password.
What you see · Security, Password
«La nueva contraseña y su repetición no coinciden.»
The new password and its repetition don't match.
What to do. Type the same thing in «Nueva contraseña» and «Repite la nueva».
What you see · Security, One-time code
«Tu cuenta ya tiene un segundo factor. Un código al correo lo rodearía, así que no se puede activar mientras esté puesto.»
Your account already has a second factor. An email code would bypass it, so it can't be turned on while it's set.
What it means. With a passkey or an app active, signing in with an email code would make your account less secure.
What to do. Sign in with your passkey or your password plus the app.
What you see · Security, Authenticator app
«El código no coincide. Revisa que la app tenga la hora correcta.»
The code doesn't match. Check that the app has the correct time.
What to do. Wait for the next code and check that your phone's time is set to automatic.
What you see · Security, Passkeys
«Este equipo ya tiene una passkey de tu cuenta.»
This device already has a passkey for your account.
What to do. You don't need another one on this device. Create one from another device if you want.
What you see · Security, Passkeys
«Se canceló antes de terminar. Puedes intentarlo otra vez.»
It was canceled before it finished. You can try again.
What to do. Tap «Reintentar» ("Retry") and complete what your device asks for.
What you see · Security, Recovery emails
«Ya tienes el máximo de correos de recuperación.»
You already have the maximum number of recovery emails.
What to do. Remove one to add another. The maximum is 3.
What you see · Security, Recovery emails
«Ese es el correo de tu cuenta; usa otro distinto.»
That's your account's email; use a different one.
What to do. Enter an email different from your account's.
What you see · Security, Recovery emails
«Demasiados intentos. Pide otro código.»
Too many attempts. Request another code.
What to do. Tap «No me llegó, reenviar» and use the new code.
What you see · Security
«Tu sesión venció. Vuelve a iniciar sesión.»
Your session expired. Sign in again.
What to do. Sign in again and repeat the change.