Skip to main content
Codespace provides several security features to protect your account.

​
Two-factor authentication (2FA)

Add an extra layer of security with TOTP-based two-factor authentication.

​
Enable 2FA

  1. Go to Settings → Security
  2. Click Enable Two-Factor Authentication
  3. Confirm your password
  4. Add your account to an authenticator app:
    • Copy the manual entry key, or scan the QR code (from your authenticator app)
    • Supported apps: Google Authenticator, Authy, 1Password, etc.
  5. Enter the 6-digit code from your authenticator to verify
  6. Save your backup codes — you’ll receive 10 one-time backup codes
Backup codes are shown only once. Save them in a secure location. If you lose access to your authenticator app, backup codes are the only way to sign in.

​
Disable 2FA

  1. Go to Settings → Security
  2. Click Disable Two-Factor Authentication
  3. Confirm your password
  4. 2FA is removed immediately

​
Active sessions

View and manage all devices signed in to your account.
  1. Go to Settings → Sessions
  2. Each session shows:
    • Device type (desktop, mobile, tablet)
    • Browser and operating system
    • IP address
    • Last active time
    • Your current session is marked with a green badge

​
Revoke a session

Click Revoke next to any session to sign it out immediately.

​
Revoke all other sessions

Click Revoke All Other Sessions to sign out everywhere except your current device.

​
Account management

From Settings → Account:

​
Export your data

Download a JSON file containing your profile, sessions, memberships, instances, and audit logs.

​
Delete your account

Account deletion is permanent after the grace period. All your instances, workspaces, and data will be destroyed.
  1. Click Delete Account
  2. Review what will be deleted:
    • All Coder instances you own
    • All data and workspaces
    • Active subscriptions
    • All sessions
  3. Type your email to confirm
  4. Your account enters a 30-day grace period
During the grace period, you can cancel the deletion request from the same page. After 30 days, your account and all associated data are permanently deleted.

​
Password

Change your password from Settings → Security. The same 12-character minimum requirement applies.