# Do a security checkup of your account

A short checklist to keep your Drime account safe: a strong password, two-factor authentication, passkeys, recovery codes, sessions and sign-in alerts.

Updated: 2026-10-21  
Source: https://drime.cloud/support/security-and-privacy/security-checkup

A few minutes in **Settings** \> **Security** are enough to protect your account well. Go through this list now, then again from time to time.

## 1. A strong password, used only for Drime

Your password must reach at least **Fair** on the strength meter. Longer is better: several unrelated words make a strong password. Avoid words from your name or your email address, which weaken it.

If a password is too weak, Drime shows **This password is too easy to guess. Make it longer, or mix in words that have nothing to do with each other.**

![The New password field with a weak password typed and the strength meter showing a tip](https://drime.cloud/media/01M5AJFMY5Y1YRF6NKQ7C1E4AA/c841f639fa69-web-settings-security-password-meter.png)

Never reuse a password from another site. To change yours, see [Change your password](https://drime.cloud/support/account-and-settings/change-your-password).

## 2. Two-factor authentication

With two-factor authentication, signing in also asks for a 6-digit code from an authenticator app. Someone who knows your password still cannot get in.

Turn it on in **Settings** \> **Security**. See [Turn on two-factor authentication](https://drime.cloud/support/security-and-privacy/two-factor-authentication).

## 3. Your recovery codes, kept safe

When you turn on two-factor authentication, Drime gives you 8 recovery codes. Each one lets you sign in once if you lose your phone. Keep them somewhere safe, away from your phone.

To see them again or get new ones, use **Show recovery codes** or **Regenerate recovery codes** in **Settings** \> **Security**. See [I lost access to my two-factor codes](https://drime.cloud/support/security-and-privacy/lost-2fa-codes).

## 4. A passkey

A passkey lets you sign in with Face ID, Touch ID, Windows Hello or a security key, without typing your password. Add one in **Settings** \> **Security** \> **Passkeys**. See [Sign in with a passkey](https://drime.cloud/support/security-and-privacy/passkeys).

## 5. Only your own sessions and devices

In **Settings** \> **Security**, check **Web browsers** and **Devices & apps**. Sign out or disconnect anything you don't recognise, or that you no longer use. See [See and sign out your sessions and devices](https://drime.cloud/support/account-and-settings/sessions-and-devices).

## 6. Sign-in alerts

Drime sends you an email with the subject **New sign-in to your … account** when your account is signed in from a new browser or system. These alerts cannot be turned off. Read each one: if it was not you, see [I got a new sign-in alert](https://drime.cloud/support/security-and-privacy/suspicious-sign-in).

## 7. An email address you can still open

Password resets and alerts go to your account's email address. If you are about to lose access to it, change it now in **Settings** \> **Account**: see [Change your email address](https://drime.cloud/support/account-and-settings/change-your-email).

## Next steps

- [Turn on two-factor authentication](https://drime.cloud/support/security-and-privacy/two-factor-authentication)
- [Sign in with a passkey](https://drime.cloud/support/security-and-privacy/passkeys)
- [I think someone else is using my account](https://drime.cloud/support/security-and-privacy/account-hacked)