> ## Documentation Index
> Fetch the complete documentation index at: https://help.joinmiyo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Use security and session controls

> Protect your Miyo account with a strong password, multi-factor authentication, recovery codes, trusted sessions, and active-session controls.

Protect the email account connected to Miyo first, then turn on Miyo's extra verification. Your email can be part of password recovery and email-code authentication.

## Enable extra verification

Miyo supports an authenticator app and an email code. An authenticator app usually offers stronger separation from your email account.

<Tabs>
  <Tab title="Authenticator app">
    1. Open **Settings → Security → Extra verification**.
    2. Choose **Authenticator app**.
    3. Scan the QR code with your authenticator app or enter the setup key.
    4. Enter the current six-digit code to confirm.
    5. Save the recovery codes somewhere separate from your device.
  </Tab>

  <Tab title="Email code">
    1. Open **Settings → Security → Extra verification**.
    2. Choose **Email code**.
    3. Request a code and check the email address shown.
    4. Enter the current code to confirm.
    5. Save the recovery codes somewhere separate from your inbox.
  </Tab>
</Tabs>

<Warning>
  Recovery codes are one-time credentials. Do not store them in a note that is visible to anyone who can unlock the same device.
</Warning>

## Change your password

Open **Settings → Security** and choose **Change Password**. Use a unique password you do not reuse on your email, bank, or another service.

## Change your email

Choose **Change Email**, enter the new address, and open the confirmation link in the new inbox. The change is not complete until Miyo confirms it.

## Log out all devices

Use **Log out all devices** if a device is lost, you signed in on a shared computer, or you suspect account access you do not recognize. Miyo invalidates active sessions and returns you to sign-in; your finance data and settings remain.

## If you suspect compromise

1. Change your email and Miyo passwords from a trusted device.
2. Use **Log out all devices**.
3. Review linked institutions and household members.
4. Contact [security@joinmiyo.com](mailto:security@joinmiyo.com) with the approximate time and what you observed.

<Warning>
  Never email a password, recovery code, Plaid credential, full account number, or one-time bank verification code.
</Warning>