# Account security

> Two-factor sign-in, signing out, and how your files are protected.

Source: https://docs.wavdrop.link/account-security

Your account holds unreleased music, so it's worth two minutes to lock it down.

## Turn on two-factor sign-in

With two-factor on, signing in needs your password and a six-digit code from an authenticator app on your phone.

1. Go to **Settings › Login & Security**.
2. Choose **Set up authenticator app**.
3. Scan the QR code with an authenticator app (Google Authenticator, 1Password, Authy and similar all work).
4. Type the six-digit code. It checks itself after the sixth digit.

You can turn it off again from the same place.

## Change or reset your password

- Signed in: change it in **Settings › Login & Security**.
- Locked out: choose **Forgot password?** on the sign-in page and follow the email.

Changing your password signs you out on every other device.

## Sign out

**Settings › Session & account › Sign out** signs out this device. To sign out everywhere else too, change your password.

## How your files are protected

- **Private by default.** Your audio, artwork and account data are stored encrypted, in private storage. Nothing sits at a public address.
- **Checked on every play.** Each time someone presses play, WAVDROP checks the link and any password or email lock before a note streams.
- **Your links, your rules.** You can turn a link off, replace it, or make it expire at any time. See [Share links](https://docs.wavdrop.link/share-links).
- **No training on your music.** WAVDROP doesn't use your audio to train AI and doesn't send it to AI services.

More detail is on the [Security](https://wavdrop.link/security) page, and what we collect is in the [Privacy Policy](https://wavdrop.link/privacy).

## Report a security issue

Found something that looks wrong? Email us from the [Security](https://wavdrop.link/security) page. Please don't test against other people's accounts or links.