Password, MFA and sessions
Protect your account with an authenticator app and recovery codes, and sign out browsers you do not recognise.
Open the menu at the top right and choose Security. The page is headed Password & MFA.
Change your password
Enter your current password and a new one of at least 12 characters. Avoid common or reused passwords; LulaSign refuses well-known ones.
Turn on MFA
Multi-factor authentication asks for a code from an authenticator app when you sign in.
- Under Set up authenticator app, enter your password and choose Start authenticator setup.
- Scan the QR code with your authenticator app, or type the setup key.
- Enter the 6-digit code from the app and choose Enable authenticator MFA.
- Save the recovery codes that appear. They are shown only once. Each code works once and lets you in if you lose your phone.
You can Replace authenticator app or Replace recovery codes later. Replacing recovery codes cancels all your old unused ones. Turning MFA off also signs out your other sessions.
Lost your authenticator?
Sign in with one of your recovery codes instead of an authenticator code, then set up the app again. If you have no recovery codes either, contact support.
Mobile security and WhatsApp codes
Under Mobile security & WhatsApp OTP, add your mobile number and confirm it with the code LulaSign texts to it. A confirmed number is used for security codes by SMS or WhatsApp.
Signed-in sessions
Signed-in sessions lists the browsers signed in to your account. Sign out any you do not recognise, or Sign out all other sessions, then change your password.