Don't type personal details, such as a client's name.

Account & Security

Choose how you sign in to DS160.io (a password, Google, or both), reset a forgotten password, and protect your account with two-factor authentication.

This guide covers the two things that keep your account yours: how you sign in, and two-factor authentication (2FA), a second step after you sign in.

Open the Security page

From inside your workspace, click Security in the sidebar. This is where you manage your sign-in methods and two-factor authentication.

Sign-in methods

Your account can have a password, a Google account, or both, and you can sign in with either.

  • Add Google to a password account. Under Sign-in methods, click the Google button and choose your Google account. If you simply choose Continue with Google on the sign-in page with the same email address, it is added for you. Either way, we email you to say Google was added.
  • Add a password to a Google account. Click Set a password. We email you a link; open it and choose your password.
  • Change your password. Click Change password and enter your current password and the new one. Every other device you were signed in on is signed out.
  • Disconnect Google. Click Disconnect. Your account needs a way in, so you can only disconnect Google once the account has a password.

Signed up with a password but never confirmed your email, then signed in with Google? Google proves the address is yours, so we remove the unconfirmed password and sign out every device, in case someone else set it. You can set a new password at any time.

Example: how this looks on the platform

Forgot your password?

On the Log in page, click Forgot password?, or go straight to Reset your password. Enter your email and we send you a link to choose a new password. The link works once, for one hour. Setting a password this way signs you out everywhere else, and two-factor authentication still applies the next time you sign in.

Two-factor authentication

With 2FA on, after you sign in you enter a short code from an authenticator app on your phone. Even if someone learns your password, or gets into your Google account, they can’t get in without that code. It applies whether you sign in with a password or with Google.

Enable two-factor authentication

Enrollment is a short wizard:

  1. Scan the QR code. Open your authenticator app (Google Authenticator, Authy, 1Password, etc.) and scan the QR code shown on screen. Can’t scan? Enter the setup key shown beneath the code manually instead.
  2. Verify a code. Your app now shows a 6-digit code that rotates every 30 seconds. Type the current code to confirm the link worked.
  3. Save your recovery codes. We show a one-time list of single-use recovery codes. Copy or download them and store them somewhere safe — they are the only way back into your account if you ever lose your phone.

Once you confirm, 2FA is active. The next time you sign in, you’ll be asked for a code after your password or your Google sign-in.

Example: how this looks on the platform

Recovery codes

Recovery codes are your backup. Each code works once. If you can’t reach your authenticator app, choose the recovery-code option at sign-in and enter one of them.

Keep them somewhere separate from your phone — a password manager or a printed copy in a safe place. If you run low or think they’ve been exposed, disable and re-enable 2FA to generate a fresh set.

Example: how this looks on the platform

Disable two-factor authentication

On the Security page, choose Disable. For your protection, this requires your current password and a valid 2FA code (or a recovery code). If your account has no password, you confirm with the Google account you sign in with instead. Once disabled, sign-in no longer asks for a code and your old recovery codes stop working.

Next steps