Account & security
Everything here lives under Settings in the app. This guide walks through your password, two-factor authentication, the devices signed in to your account, and what happens if you decide to leave.
Change your password
Open Settings and go to Security. Changing your password asks for your current one first, then signs out every other device - so if you are changing it because you think someone else has it, that single action locks them out.
- What we require
- At least 12 characters, with an uppercase letter, a lowercase letter, a number, and a special character. The form shows each rule turning green as you type.
- What we recommend
- A long passphrase from a password manager beats a short complicated one. Never reuse the password you use anywhere else - reused passwords are how most accounts are actually lost.
Turn on two-factor authentication
Two-factor authentication means a stolen password is not enough to get into your account. SignNexa uses a standard authenticator app - Google Authenticator, Authy, 1Password, or any other TOTP app.
- 1
Start setup
In Settings, Security, find Two-factor authentication and click Enable 2FA.
- 2
Scan the QR code
Open your authenticator app and scan the code shown. The app will start generating a fresh 6-digit code every 30 seconds.
- 3
Confirm the code
Type the current 6-digit code back into SignNexa to prove the app is set up correctly. 2FA is not switched on until this succeeds.
- 4
Save your recovery codes
You will be shown one-time recovery codes and offered a .txt download. Save them somewhere you can reach without your phone - they are the only way back in if you lose the device.
Sign in with 2FA on
After your email and password, you will be asked for the 6-digit code from your authenticator app. If you do not have your phone, use one of your recovery codes instead - each one works once. To turn 2FA off again you will need a current code or a recovery code, so nobody who simply borrows an open laptop can disable it.
Review your active sessions
The Security page lists every device currently signed in to your account, with the current session first. Sign out a single device you do not recognise, or use Log Out Other Devices to end every session except the one you are using. This is worth doing after you use a shared or public computer.
Verify your email
An unverified email address is flagged on the Security page with a button to resend the verification message. Verifying matters for more than tidiness: it is what proves the address is yours, and it is required before some account actions will run.
Delete your account
Account deletion lives under Settings, Danger zone. It permanently removes your account and personal data, including your signatures and any Nexa Page you published - published pages stop resolving. There is no undo, so export anything you want to keep first.
Last reviewed: