Password and security

The Security page keeps your password, your two-step verification and the devices where you are signed in.

Open the Security page

1. At the bottom of the left menu, click the row with your avatar and name.
2. Click Two-step verification. The Security page opens.

Password, two-step and recovery code changes open the Fresco BI sign-in page. Fresco BI never sees your password or your codes. When you finish or cancel there, you come back to the Security page with a short message.

Change your password

1. In the account menu, click Change password. Or click Change password in the Password card of the Security page.
2. Enter your current password.
3. Enter the new password twice and confirm.

The Password card shows when you last changed it.

Password rules:

• At least 12 characters.
• Not your email address.

Forgot your password? On the sign-in page, click Forgot password? and enter your work email. If the account exists, you get an email with a link to choose a new password.

Caution

After too many wrong attempts, the sign-in page says Too many attempts. Try again in a few minutes. Wait, then try again.

Two-step verification

With two-step verification on, signing in asks for a second proof after your password. The Two-step verification card shows On or Off.

Turn it on

1. In the Two-step verification card, click Turn on.
2. Scan the QR code with an authenticator app on your phone.
3. Enter the code the app shows, and confirm.

Once it is on, you can add more methods:

• Add authenticator app: another phone or app.
• Add passkey / security key: a passkey on your device or a hardware key.

Recovery codes

Recovery codes let you sign in when you do not have your phone or key. Each code works once.

• If you have no codes yet, click Recovery codes and save the codes you get.
• The card shows how many codes are left, for example Recovery codes 8 left.
• Click Regenerate recovery codes to get a new set. The old codes stop working.

Tip

Keep your recovery codes in a password manager or another safe place. Do not keep them on the same phone as your authenticator app.

Remove a method or turn it off

1. In the list of methods, click Remove beside the method.
2. Confirm Remove this method?.

Removing your last method turns two-step verification off.

If your organization requires two-step verification, you cannot remove your last method. The app says Your organization requires two-step verification. Add another method first. See Authentication.

Some changes need a fresh sign-in. If you see Sign in again to confirm this change, sign in on the page that opens, then repeat the action.

Signed-in devices

The Signed-in devices card lists the browsers where you are signed in: browser and system, part of the IP address, when the session Started and when it was Last active. This device marks the one you use now.

• Click Sign out beside a device to end that session.
• Click Sign out all other devices to end every session except this one.

Sign in with Google

If the sign-in page shows Continue with Google, you can sign in with your Google account.

• You signed up with Google. The Password card says you sign in with Google and offers Set a password. Set one to also sign in with your email and a password.
• You already have an account with the same email. The first time you use Google, the sign-in page asks for the password of your existing account, to link the two. If you do not know that password, use Forgot password? first.

API keys

The API keys card links to Manage API keys. See API keys and app tokens.