Security
Your password, two-factor authentication, and the devices you are signed in on.
Open Account → Security.
Changing your password
Enter your current password, then the new one twice, and choose Save Password.
You stay signed in where you are. Every other device you were signed in on is signed out, so a password change also locks out anyone who had it.
Two-factor authentication
Two-factor authentication adds a six-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator or similar) to your sign-in. Turn it on from this page and follow the steps. Keep the recovery codes it gives you somewhere safe: they are how you sign in without the app.
To turn it off, you need your password and a current code.
Your sessions
This page lists every device you are signed in on. If you see one you do not recognise, end it, or choose Sign out other devices to end every session except this one.
An ended session is signed out within a minute.