Account security: password, 2FA, sessions and phone change

Open the My Account page from the profile menu at the top right. All security-related settings live in the Security and Sessions tabs; changing your phone number is done from the phone row on the My Account tab.

Changing your password

In the Password section of the Security tab, fill in Current Password, New Password and New Password (Repeat), then press Change Password. The new password must be at least 8 characters; the hint panel on the screen shows the suggestions for uppercase and lowercase letters, digits and special characters.

Two-factor authentication (2FA)

With 2FA enabled, a one-time 6-digit code is requested alongside your password at sign-in. When you press Enable 2FA, two methods are offered:

• Continue with App: scan the QR code on the screen with Google Authenticator or Authy (a manual setup key is also shown if you cannot scan the QR), then enter the 6-digit code the app generates and press "Confirm and Enable".

• Continue with SMS: activate it by entering the 6-digit code sent to your phone number — with this method the code arrives by SMS at every sign-in.

Active sessions

The Sessions tab lists every device signed in to your account: device type (Web/Desktop/Mobile), IP address, when the session started and the last activity time. The device you are using is marked with a "This session" badge.

• You can end a session remotely with the button on the row of a device you do not recognize or forgot to sign out of.

• "Sign Out of This Device" closes your current session and returns you to the sign-in screen.

• The "Refresh" button updates the list instantly.

Changing your phone number

1. 1

   Enter your new number

   On the My Account tab, click the edit icon on the phone row, type your new number and press Send Code — the verification code is sent to your new number by SMS.

2. 2

   Confirm the code

   Enter the 6-digit code that arrives on your new phone. After confirmation your sign-in number is updated; you use the new number from your next sign-in onwards.

Phone number rules and the verification code limit

Two rules apply to sending verification codes, to protect your account and prevent abuse.

• Turkish numbers only: when registering and when changing your phone number, only numbers starting with +90 are accepted. If you enter an international number you get the message “Only Turkish (+90) phone numbers are accepted.”

• Code request limit: if you request many verification codes in a short time you get “Too many verification code requests.” and no new code is sent for a while. This limit applies to registration, sign-in, phone change and password reset alike.