Help

It adds a second step after you sign in with Google: a 6-digit code from an app on your phone, such as Google Authenticator, 1Password or Aegis. If someone gets into your Google account, or finds it left open on a shared computer, it still is not enough to read your conversations here.

It is optional. You turn it on — and off — in Settings, under Two-factor authentication.

When you turn two-factor on, we show you 10 recovery codes, once. Save them somewhere away from your phone — printed, or in a password manager. Each one works a single time.

They exist for one situation: you no longer have the authenticator app. A recovery code does not sign you in — it turns two-factor off, so you can get in and set it up again with a new phone.

You can sort this out yourself, without waiting for us:

1. Sign in with Google as usual. The site will ask for your 6-digit code.
2. Type one of your recovery codes into that same box and press “Use a recovery code”.
3. Two-factor is now off. Go to Settings to turn it on again on your new phone, and save the new codes.

Then we have to help, and you will need to email us from the address on your Thymming account.

We will not simply switch it off because an email asks us to. An email inbox is often the first thing an attacker gets hold of, so if that were enough, two-factor would protect nobody. We will ask you questions only the account holder can answer, and it will take longer than a recovery code would.

Or write to feedback@thymming.com yourself.

For questions about your data, deleting your account, or what we do with what you share, start here:

Privacy PolicyTerms