Your account and your data
Passwords, 2FA and passcodes
Three separate protections: your password, two-factor authentication, and the app passcode.
Your password
Change it in Settings Account Change Password. If you sign in with Google or Apple there is no NewTwos password to change, and your security is theirs.
Two-factor authentication
Settings Account Two-Factor Authentication turns on 2FA using an authenticator app, with email as an alternative and backup codes for recovery.
Save the backup codes somewhere that is not your phone. They are the recovery path if you lose the authenticator, and storing them only on the device that holds the authenticator defeats the purpose.
Some sensitive actions ask for a second confirmation even after sign-in.
The app passcode
Settings Account App passcode requires a code to open NewTwos, independent of your device lock.
This is aimed at a different threat: not someone attacking your account, but someone picking up your unlocked phone.
Going further
Three different jobs. Password and 2FA protect the account. App passcode protects the screen. Blur and list passcodes protect specific content. See blur and passcodes.
Losing 2FA without backup codes is serious. Recovery is deliberately hard, which is the point of 2FA.
Settings that change this
- Settings Account Change Password changes your password.
- Settings Account Two-Factor Authentication sets up 2FA.
- Settings Account App passcode locks the app.
Tips
- Turn on 2FA and print the backup codes. Genuinely print them.
- Use a different code for the app passcode than your phone unlock, since you will type it in front of people.