Account & security

How do I change my password?

Go to Account → Security → Password. Enter your current password, then your new password (minimum 8 characters). We recommend using a mix of uppercase, lowercase, numbers, and symbols.

How do I reset my password?

On the login page, click "Forgot your password?" and enter your email. We'll send a secure link to create a new password. The link expires after 1 hour.

What makes a strong password?

Use at least 8 characters with a mix of uppercase, lowercase, numbers, and symbols. Avoid reusing passwords from other sites. Consider using a password manager.

How do I enable 2FA?

Go to Account → Security → Two-Factor. Click "Set Up", scan the QR code with an authenticator app (Google Authenticator, Authy, or 1Password), and enter the 6-digit code to verify.

What are backup codes?

Backup codes are single-use codes you can use if you lose access to your authenticator app. Save them somewhere safe when you set up 2FA. You can regenerate new codes from Account → Security → Two-Factor (requires password).

How do I disable 2FA?

Go to Account → Security → Two-Factor. Click "Disable" and confirm with your password. This removes the extra security layer from your account.

How do I see my active sessions?

Go to Account → Security → Sessions. You'll see all active sessions with browser, OS, IP address, and creation date. Your current session is highlighted.

How do I sign out of another device?

Go to Account → Security → Sessions. Click "Revoke" next to the session you want to end. That device will be signed out immediately.

How do I sign out of all devices?

Go to Account → Security → Sessions. Click "Revoke All Other Sessions" to sign out everywhere except your current device.

How long do sessions last?

Sessions last 7 days of inactivity and refresh every 1 day while active.

What are known devices?

Noarka tracks devices (browser + IP combinations) that have accessed your account. New device logins are flagged for your security.

How do I remove a device?

Go to Account → Security → Devices. Click "Remove" next to the device you want to remove from your known devices list.

How do I connect my Google account?

Go to Account → Connected Apps or Account → Security → Linked Accounts. Click "Connect" next to Google and complete the OAuth flow.

How do I disconnect a linked account?

Go to Account → Connected Apps and click "Disconnect" on the provider. You must have at least one other sign-in method before you can remove a linked account.

What happens if I fail to log in too many times?

After 5 failed login attempts within 15 minutes, your account is temporarily locked for 15 minutes. A successful login clears the lockout.