Password & Security

Changing your password

1. Open Settings → Security
2. Enter your current password
3. Enter the new password
4. Repeat the new password to confirm
5. Click Change password

Password strength

While typing the new password, Pachurros shows a strength indicator:

Rating	Meaning
Very weak	Fewer than 6 characters or very common
Weak	Lowercase letters or numbers only
Medium	Mix of letters and numbers
Strong	Letters, numbers, and special characters
Very strong	Long, complex, not easily guessed

Recommendation: At least 12 characters with a mix of uppercase and lowercase letters, numbers, and special characters.

Forgot your password?

On the login page: Forgot password → enter your email address → you will receive a reset link by email (valid for 1 hour).

Two-factor authentication

On top of your password, a code from an app on your phone. Someone who knows your password still cannot get into your account.

Setting it up

1. Settings → Security → Two-factor authentication → Set up
2. Enter your password
3. Scan the QR code with an authenticator app — Google Authenticator, 1Password, Bitwarden or the Passwords app on iPhone. If scanning fails, the key is printed next to it to type in.
4. Enter the six digits from the app and click Activate
5. Save the ten recovery codes

From now on, signing in asks for your password and a code.

You see the recovery codes only once

They are the only way back if you lose your phone. Copy or download them and keep them separate from the phone — in your password manager or on paper. Each code works exactly once.

Signing in

After email and password, a field for the code appears. Both work there: the six digits from the app, or one of your recovery codes.

When codes run low

Security shows how many of the ten codes are still unused. New codes generates a fresh set — the old one becomes invalid.

Turning it off

Security → Turn off, then confirm with your password. Your password alone is enough again afterwards, and the recovery codes become invalid.

Common question	Answer
The code is rejected	It changes every 30 seconds — use the current one. If your phone’s clock is off, the codes will be too.
I cancelled the setup	Nothing happened. Two-factor only goes live with the first correct code.
Phone and codes both lost	Only support can help then — which is why the codes belong somewhere else.

Active sign-ins

Under Settings → Security you can see which devices your account is signed in on — browser and operating system, the IP address, and when the device was last active. Your current device is marked this device.

Action	Effect
End next to a device	That one sign-in becomes invalid. The next click there lands on the login page.
Sign out all other devices	Every sign-in except the current one becomes invalid. You stay signed in here.

If an entry looks unfamiliar: sign out all other devices first, then change your password.

Older sign-ins do not appear in the list

Sign-ins from before this feature carry no identifier and cannot be listed individually. Sign out all other devices invalidates them too — if you want to be certain, that is the reliable route.

Changing your password also signs out all other devices.

Account security tips

• Use a unique password (not the same as other services)
• Never share your password with anyone
• Log out on public devices after use — or end the sign-in remotely later under Active sign-ins