Keep your Bodek account secure

Your Bodek account opens every app you use, so it's worth protecting well.

1. Use a unique password

Choose a password you don't use anywhere else. It must be at least 8 characters; longer is better. A password manager makes this easy.

2. Turn on two-step verification

Add an authenticator app, email codes or a passkey so a password alone isn't enough to sign in. See Turn on two-step verification.

3. Keep recovery codes somewhere safe

Recovery codes let you in if you lose your phone. Generate them in Settings → Security & 2FA and store them offline or in your password manager.

4. Get alerted about new sign-ins

In Settings → Notifications, turn on Notify me when a new device signs in. We'll email you when your account is used from a new browser or network.

5. Review your devices

Settings → Devices lists the devices that stay signed in. Revoke any you don't recognise, then change your password.

Protect your API keys

If you use Bodek Developers, treat API keys and client secrets like passwords: keep them on your server, never in public code, and revoke any that may have leaked.