Account security: password, 2FA, sessions and phone change
Change your password and set up two-factor authentication from the Security tab of the My Account page; manage your devices from the Sessions tab and change your phone number from the My Account tab.
Last updated: 7 October 2026
Click your avatar at the top right and choose My Account. The account page has five tabs: My Account, Security, Subscription, Notifications and Sessions. Your password and two-factor authentication are on the Security tab, the list of signed-in devices is on the Sessions tab, and changing your phone number is done from the Phone row on the My Account tab.
Even if your Piyzi subscription expires, the My Account page stays open; you can still manage your password, 2FA and sessions.
Changing your password
- 1Open the Change Password card
Use the Change Password card on the My Account → Security tab.
- 2Fill in the fields
Type your current password into Current Password and your new password into New Password and Repeat New Password. The eye icon on the right of each field shows what you typed. As you type the new password, a five-segment Password Strength bar appears below it; once you fill in the repeat field, "The passwords match" or "Passwords do not match" appears.
- 3Press Change Password
The button becomes active once all three fields are filled in. When the password has been changed, a confirmation appears and the form is cleared; Cancel only clears the form.
The new password must be at least 6 characters; a shorter one shows "Password must be at least 6 characters". The Security Tips panel on the right suggests using uppercase and lowercase letters, numbers and special characters.
The new password and its repeat must be the same; otherwise "The passwords do not match" appears.
If you enter your current password wrongly, the password is not changed and "An error occurred while changing the password" appears; when you see this message, check the Current Password field first.
Changing your password does not close the open sessions on your other devices. If you are changing it because someone found out your password, end the sessions you do not recognise on the Sessions tab afterwards. If you do not remember your current password you cannot change it here; sign out and use Forgot Password on the sign-in screen.
Two-factor authentication (2FA)
With 2FA enabled, a 6-digit code is requested alongside your password at sign-in. On the Two-Factor Authentication (2FA) card of the Security tab press Enable 2FA; in the Two-Factor Authentication Setup window choose one of the two methods:
Authenticator App (Continue with the App): scan the QR code on the screen with an authenticator app such as Google Authenticator, Authy or Microsoft Authenticator; the account appears in the app as "Piyzi (your email address)". If you cannot scan the QR code, enter the key shown below it into the app manually (the copy icon puts it on the clipboard). Type the 6-digit code the app generates into Verification Code and press Confirm and Enable.
SMS Verification (Continue with SMS): as soon as you press the button, a 6-digit code is sent to the phone number on your account. The code is valid for 3 minutes; if it does not arrive, ask for a new one with "Didn't receive the code? Resend" at the bottom of the window. Type the code and press Confirm and Enable. With this method the code arrives by SMS at every sign-in.
If the code is correct, a success message appears, the window closes by itself within a few seconds and an Active badge appears on the card. If the code is wrong or has expired, the field is cleared and a warning appears; try again with a new code. Back at the bottom of the window returns to the method choice, and Cancel leaves the setup.
Authenticator codes are generated from your phone's clock; if the phone's time is not set automatically, the codes may be rejected. Although the 2FA card says the code comes "from the app on your phone", if you chose the SMS method the code arrives by SMS at every sign-in.
Changing the method and turning 2FA off
While 2FA is on you cannot switch the method directly: turn 2FA off first, then set it up again with the method you want. To turn it off press Disable 2FA, type your account password into Your Password in the window that opens and press Disable 2FA. If the password is wrong, 2FA stays on and a warning appears.
When you turn 2FA off, your account is protected by your password alone. If you are going to replace the phone that has your authenticator app, turn 2FA off while you still have the old phone and set it up again with the new one (or use your app's account transfer feature). If you lose that phone, you cannot generate a sign-in code and cannot get into your account; in that case contact the Piyzi team through the channels on the piyzi.com Contact page (e.g. hi@piyzi.com).
Active sessions
The Active Sessions list on the Sessions tab shows the devices signed in to your account. Each row shows the browser or app and the operating system (e.g. Chrome · Windows 10/11, Piyzi Mobil · iOS), a device type badge (Web, Mobile, Desktop or API) and the following details:
Last activity: when the session was last used (updated at most once a minute).
Started: when the session was opened.
IP: the IP address of the network the session was opened from.
Last used: despite its name, this shows the date on which the session will close by itself if it is not used; the date moves forward as the session is used.
The device you are using is marked with a This session badge and a coloured frame.
Press Sign Out on another device's row, then choose End Session again in the End Session window. Someone has to sign in again on that device. Press Cancel to back out.
Sign Out of This Device on your own row opens the same confirmation window; after you confirm, you are taken to the sign-in screen with the "Your session has expired" message at your next action in the panel.
Refresh updates the list. There is no option to sign out of all devices at once; end the sessions one by one.
The "2FA verified" badge appears on every session, even when 2FA is off for your account; check whether 2FA is on from the card on the Security tab.
When you end a device's session or sign out on that device, Piyzi stops sending push notifications to it; the same applies to sessions that have expired.
A row labelled "Piyzi Support" is a time-limited support session (at most 2 hours) that our support team opened without your password to solve your problem. You can end it at any time like any other session; see the "Creating and following a support ticket" article for details.
Changing your phone number
You change the number you sign in with from the profile card on the My Account tab. Because the verification code goes to the new number, you can do this even if you no longer have access to your old number.
- 1Open the window
On the My Account tab, click the pencil icon (Change phone number) on the Phone row. The Change Phone Number window shows your current number.
- 2Enter the new number and your password
Type your mobile number into New Phone Number as +90 5XX XXX XX XX (a leading 0 is converted to +90). For security, type your account password into Current Password; both fields are required. The Send Code button becomes active once both are filled in.
- 3Confirm the code
The verification code is sent to your new number by SMS; in the window, the "Code valid for:" line counts down from 5 minutes. Type the 6-digit code and press Verify and Save. If the code does not arrive, use Resend Code, which becomes available after 60 seconds; if the time runs out, request a new code. The back arrow in the title takes you back to correct the number.
After confirmation your number is updated and saved as verified. Use your new number from your next sign-in onwards; if SMS two-factor authentication is on, sign-in codes also go to the new number.
If "An error occurred" appears, the most common reason is a wrongly entered current password. If your password is correct, the new number may already be registered to another Piyzi account; a number can only be used by one account.
Phone number rules and the verification code limit
Two rules apply to phone numbers and to sending verification codes, to protect your account and prevent abuse.
Turkish mobile numbers only: when signing up and when changing your phone number, only numbers in the +90 5XX XXX XX XX format are accepted. If you enter a landline, a foreign number or a number with missing or extra digits, the form shows "Enter a valid mobile number (e.g. +90 532 123 45 67)." (sign-up) or "Please enter a valid phone number" (phone change).
Code request limit: if you request many verification codes in a short time, no new code is sent for between 15 minutes and 1 hour, depending on the flow. On the sign-in and sign-up screens you then see "Too many verification code requests. Please try again later." The Verify Your Account screen shows "The verification code could not be sent.", and screens such as phone change and 2FA setup show a general warning. On the Forgot Password screen the information message stays the same, but no SMS arrives.
If the code does not arrive, first check that the number is typed correctly and that your phone has signal. Rather than pressing "resend" repeatedly, wait a minute or two: repeated requests make you hit the limit and wait longer.
In the mobile app tap the person icon at the far right of the bottom bar, or My Account in the side menu. On the Account Settings screen open the Security tab.
Changing your password: in the Change Password section fill in Current Password, New Password and Repeat New Password, then tap Change Password. The new password must be at least 6 characters; the Password Strength bar shows how strong it is as you type.
Two-factor authentication: tap Enable 2FA and, in the 2FA Setup window, tap Authenticator App or SMS Verification. As soon as you choose SMS, a code is sent to your phone (valid for 3 minutes; "Didn't receive the code? Resend" sends a new one). Enter the code and tap Confirm and Enable. To turn it off, tap Disable 2FA and enter your password.
Changing your phone number: on the My Account tab, tap the pencil icon on the Phone row of the Personal Information card. Enter the New Phone Number and your Current Password, tap Send Code, then enter the 6-digit code sent to the new number and tap Verify and Save (the code is valid for 5 minutes; Resend Code becomes available after 60 seconds).
Email: the Email row under Personal Information is view-only; see the article "How do I change my email address?".
You cannot scan a QR code shown on the same phone: copy the key under "If you can't scan the QR code, enter this key manually" and paste it into your authenticator app.
The list of active sessions and ending them remotely are only available in the web panel: your avatar → My Account → Sessions. To sign out of this device in the mobile app, use Sign Out at the bottom of the side menu.