We notify you when something security relevant happens on your account. You control these under Notification Preferences, in the app, by email, or both.
What we send
- New device sign-in. Somebody signed in from a device or place we have not seen before.
- Password changed. Your password was changed.
- Two-factor authentication changed. A second step was turned on or off.
Leave these on, by email
Most notification settings are a matter of taste. These are not. A security alert is only useful if it reaches you quickly and somewhere you actually look, and an in-app notice you see next Tuesday is no use at all.
They are also the cheapest alert you will ever get: a message you did not expect is the earliest sign that something is wrong, usually well before anything visible happens to your data.
If one arrives and it was not you
- Change your password now, from Profile.
- Turn on two-factor authentication if it is not already on. See Two-factor authentication.
- If two-factor was already on, generate fresh backup codes by turning it off and on again, in case an old code was seen.
- Check your team list for anyone you do not recognise.
- Contact support and tell us what you saw.
A new device alert you were not expecting
Before assuming the worst: a new browser, a cleared cookie, a VPN, or a phone on mobile data instead of wifi can all look like a new device. If the timing matches something you did, it is almost certainly you. If it does not, treat it as real and work through the list above.