Keep your account safe

All of these are in Profile & Settings → Security.

Your password

Your password needs at least 8 characters, with an uppercase letter, a lowercase letter, a number and a special character (like ! or #). A checklist shows each rule as you type, and the button stays off until every rule passes and both passwords match.

Change it: Profile & Settings → Change password → enter your Current password, a New password and Confirm new, then Update password.

Forgot it: on the log-in page choose Forgot password, press Send reset code, enter the code from your email, then set a new password.

Two-factor authentication

Adds a second step when you log in: a 6-digit code from an authenticator app (Google Authenticator, Authy, Microsoft Authenticator, …).

Turn it on

1. Switch on Two-factor authentication.
2. Scan the QR code with your authenticator app.
3. Enter the 6-digit code the app shows and press Turn on.

From then on, after your password you'll see Authenticator code — open the app and enter the current code, then Verify and log in.

Turn it off: switch it off, then confirm with your Password and a Code from your app.

Keep your phone safe

If you lose the phone with your authenticator app, you can't complete the second step. Turn two-factor off before you change phones, then set it up again on the new one.

Fingerprint or face sign-in (Biometric unlock)

Log in with Face ID, your fingerprint or Windows Hello instead of typing your password — on this device.

1. Switch on Biometric unlock.
2. Confirm with your fingerprint, face or device PIN when your device asks.

Next time, press Log in with fingerprint or face on the log-in page. If it says "Not available — this device has no fingerprint or face unlock", your device doesn't support it.

Your fingerprint or face never leaves your device — FOID only stores a key your device creates. Turning Biometric unlock off removes it.

Login alerts

With Login alerts on (the default), FOID emails you and adds a notification when someone signs in to your account from a new device. The first device you use is remembered, so you won't get an alert for it.

Got an alert you don't recognise? Change your password straight away and turn on two-factor authentication.

Face data

Your face template is stored encrypted. To delete it: Profile & Settings → Linked identity documents → Face (liveness) → Delete. You'll need a new liveness check on My Identity before you can share a verified FOID again.