> ## Documentation Index > Fetch the complete documentation index at: https://docs.base44.com/llms.txt > Use this file to discover all available pages before exploring further. # Securing your account > Keep your Base44 account secure: turn on two-factor authentication, see and sign out the browsers you're signed in on, and get an email for each new sign-in. Keep your Base44 account safe with two-factor authentication, a list of every browser you're signed in on, and an email whenever your account signs in somewhere new. You manage all of them from the **Profile** page of your account settings. If you used an account API key, this page also explains what replaced it. *** ## Two-factor authentication Two-factor authentication adds an extra layer of protection when you sign in to Base44. After you turn it on, Base44 asks for both your password and a verification code each time you sign in. Some workspaces require two-factor authentication. If a workspace you belong to does, you need it turned on to open that workspace, and Base44 warns you before you turn it off. Read how a workspace goes about [requiring two-factor authentication](https://docs.base44.com/Enterprise/SSO-for-enterprise-workspace.md#requiring-two-factor-authentication). You can choose one or both verification methods: * **Authenticator app:** Use an app like Google Authenticator or Duo to generate secure sign-in codes on your phone. * **Text messages:** Get sign-in codes sent to your phone by text message. Standard message and data rates may apply when you receive text messages. > [!WARNING] > > You need a [paid plan](https://base44.com/pricing) to use text message (SMS) verification. If you're on the Free plan, the text message option doesn't appear, so secure your account with the authenticator app instead. **To set up two-factor authentication:** 1. Click your workspace name at the bottom left of your account. 2. Click **Account settings**. 3. Under **Two-factor authentication**, click **Enable** next to each method you want to use and follow the on-screen instructions to complete setup: * **Authenticator app:** Base44 generates a QR code and a manual key that you add to your authenticator app. * **Text messages:** Confirm your phone number so Base44 knows where to send verification codes. ![The Two-factor authentication section with Enable buttons for Authenticator app and Text messages](https://mintcdn.com/base44/QC3cbazFPwiNqXDJ/images/2fa.png?fit=max\&auto=format\&n=QC3cbazFPwiNqXDJ\&q=85\&s=13e08f2fb4d2a29f2561db921bc5e162) Two-factor authentication options in Base44 account settings *** ## Managing signed-in browsers Every web browser you sign in on stays signed in, so over time you can end up signed in on your work laptop, your home computer and your phone. **Signed-in browsers** in your account settings lists them all, so you can sign out any of them from where you are, for example after you lose a laptop or use a shared computer. ![A screenshot of Signed-in browsers listing Chrome on Mac OS X as This browser and Mobile Safari on iOS with a Sign out button](https://mintcdn.com/base44/uF3QT23D15UpKE8b/images/account-signed-in-browsers.png?fit=max\&auto=format\&n=uF3QT23D15UpKE8b\&q=85\&s=d9e4ef892c49b37db1257b43926d02ad) Signed-in browsers on your Profile page > [!TIP] > > **Some reasons to sign out a browser:** > > * You signed in on a shared or public computer, like a friend's laptop or a hotel computer, and forgot to sign out. > * Your laptop or phone was lost or stolen. > * You sold or gave away a computer you used Base44 on. > * You see a browser or a place you don't recognize, which can mean someone else knows your password. ### Reading the browser list Each browser in the list shows its browser and operating system, like Chrome on Mac OS X, where it was used and when it was last active, and when it signed in, with its IP address. The browser you're using now is always at the top, marked **This browser**. To sign out of it, sign out of Base44 as usual. If you have more browsers than fit in the list, click **Load more** at the bottom of the list. The location comes from the browser's internet connection, so it's approximate. A VPN or a work network can make a browser you use look like it's somewhere else. > [!WARNING] > > **Limits of signing out browsers:** > > * Signing out a browser from your account settings only signs out that web browser. You stay signed in on the Base44 mobile app and in the CLI. > * You can only see and sign out browsers on the web. You can't do it from the Base44 mobile app yet. > * The list only shows browsers you signed in on after this was added to Base44, on November 3, 2026. A browser you signed in on before then isn't listed, and signing out other browsers doesn't reach it, until you sign in on it again. If that's the browser you're using now, nothing is marked as this browser, and the button at the bottom reads **Sign out all browsers** instead. ### Signing out one browser Sign out a single browser when you know which one it is, like the laptop you left signed in at a friend's place. Whoever uses that browser next has to sign in again to get into your account. **To sign out one browser:** 1. Click your workspace name at the bottom left of your account. 2. Click **Account settings**. 3. Under **Signed-in browsers**, next to the browser you want to sign out, click **Sign out**. 4. Click **Sign out** to confirm. ### Signing out everywhere else If you think someone else has got into your account, sign out every browser at once except the one you're using now. You stay signed in where you are, and every other browser has to sign in again. **To sign out everywhere else:** 1. Click your workspace name at the bottom left of your account. 2. Click **Account settings**. 3. Under **Signed-in browsers**, click **Sign out others**. 4. Click **Sign out others** to confirm. > [!TIP] > > After you sign out everywhere else, [reset your password](https://docs.base44.com/documentation/account-and-billing/signing-in-and-resetting-your-password.md#resetting-your-password), or secure your Google account if you sign in with Google, and turn on [two-factor authentication](#two-factor-authentication), so no one can sign back in with your old password. *** ## Getting sign-in emails Base44 emails you when your account signs in from a new device or location, so you can spot a sign-in that wasn't you. A sign-in counts as new when its browser, operating system, device type or country hasn't been used on your account in the last 30 days. The email shows the device, its approximate location, its IP address and the time of the sign-in. If it was you, there's nothing to do. A VPN, a work network or travel can make your own sign-in look new. > [!NOTE] > > **When Base44 sends sign-in emails:** > > * **First device:** You don't get an email for the first device you sign in on with a new account. > * **Daily limit:** You get at most 3 sign-in emails a day. > * **Mobile app:** Sign-ins from the Base44 mobile app are emailed too, but they don't appear in **Signed-in browsers** yet. The email tells you when that's the case. ### Responding to sign-in emails If you don't recognize a sign-in, secure your account straight from the email. **To secure your account from a sign-in email:** 1. Click **Secure your account** in the sign-in email. 2. Under **Signed-in browsers**, next to the sign-in marked **New sign-in**, click **Sign out**. 3. Click **Sign out** to confirm. 4. Under **Now secure your account**, click **Change password** and follow the steps to reset it. If you sign in with Google, secure your Google account instead. 5. If two-factor authentication is off, click **Turn on two-factor** and follow the on-screen instructions. > [!TIP] > > If you can't sign in to your account, use the reset password link in the email. ### Turning emails on or off Sign-in emails are on by default. If you turn them off, Base44 emails you to let you know, so you can tell if someone else turned them off. **To turn sign-in emails on or off:** 1. Click your workspace name at the bottom left of your account. 2. Click **Account settings**. 3. Under **Signed-in browsers**, click the **Email me about new sign-ins** toggle. ![Email me about new sign-ins toggle, turned on, under Signed-in browsers in Account settings](https://mintcdn.com/base44/rYZQKSl46qzKID74/images/account-signed-in-browsers-email-toggle.png?fit=max\&auto=format\&n=rYZQKSl46qzKID74\&q=85\&s=f4b52250860fafaea693d2a59eca4271) Use the toggle to turn sign-in emails on or off. *** ## Account API keys Account API keys used to let external tools and scripts access your Base44 account. Personal access tokens replace them, and they do the same job with more control over what each token can reach. > [!WARNING] > > Account API keys are no longer supported. Since **October 15, 2026**, you can't view or create an account API key, and existing keys are being switched off gradually. Some workspaces already block them. To keep your integrations working, create a personal access token and send it in an `Authorization: Bearer` header instead of the `api_key` header. See [moving from account API keys](https://docs.base44.com/Workspaces/Personal-access-tokens.md#moving-from-account-api-keys). This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.