How do I keep my account secure?

Your sign-in and security settings live in Settings, under Account, then Sign-in & security. Select a row to open it.

Your sign-in email

Sign-in shows the email you sign in with. Only you can see it, and it can't be changed. Accounts created with a crypto wallet sign in with that wallet and have no sign-in email.

Change your password

1. Open Password.
2. Enter your Current password.
3. Enter a New password of at least 10 characters, then enter it again under Confirm new password.
4. Select Change password.

Changing your password signs you out on every other device.

Forgot your password?

1. On Sign in, select Forgot password?
2. Enter the email you signed up with and select Send reset link.
3. Open the link in the email. It works once and expires in an hour.
4. Enter a new password (10 to 128 characters) twice, select Reset password, then sign in.

Resetting your password signs you out on every other device. If two-factor authentication is on, you'll still be asked for a code. Wallet-only accounts have no email recovery.

Turn on two-factor authentication

Two-factor authentication adds a second step to signing in: a code from an authenticator app on your phone. It needs an account with a password.

1. Open Two-factor authentication.
2. Enter your password under Confirm your password, then select Set up two-factor.
3. Scan the QR code with your authenticator app. If you can't, select Cannot scan it? to see the setup details to enter by hand.
4. Save your backup codes somewhere safe, away from your phone. Select Copy them to copy them. You won't see them again.
5. Enter the code your app shows under Code from the app, then select Turn on two-factor.

Turning on two-factor signs you out on every other device. From then on, signing in asks for a code on the One more step page.

Lost your phone? On One more step, select Lost your phone? Use a backup code and enter one of your backup codes. Each code works only once.

Connected accounts

When sign-in providers such as Google are available, Connected accounts lets you use them to sign in instead of your password.

• Select Connect next to a provider and approve the request with that provider. For your security, you may be asked to sign in again first.
• Select Disconnect to stop using a provider. You can't disconnect the only way your account signs in.

Devices and sessions

Active sessions lists the devices signed in to your account. Select Sign out others to sign out everywhere except the browser you're using. To sign out of this browser, select Sign out under This session, or choose Sign out from the account menu.

nook will never ask you for a seed phrase or a private key. If something looks wrong with your account, change your password and select Sign out others, or contact nook through Support.