# Account security: password, two-factor sign-in and passkeys

> Change your password, turn on two-factor sign-in or add a passkey in Settings, Security, and switch off a team member who has left.

Each person in your shop signs in with their own account, and keeps it safe in **Settings** › **Security**. There you can change your password, turn on two-factor sign-in, which asks for a code from your phone, and add a passkey to sign in with your fingerprint or face. When someone leaves your shop, the owner switches their account off on the Team page.

## Before you begin

- The Security page is your own, whatever your role: every member can open it.
- Switching off another member needs **Manage the team**. By default only the shop's **Owner** has it.

## Open the Security page

1. Open your own settings:

**On a computer:**
Click your name at the bottom of the menu on the left, then **Settings**.

**On a phone or tablet:**
Tap your picture or initials at the top right, then **Settings**.

2. Choose **Security**. On a phone it is in the row of buttons at the top; slide the row sideways if you do not see it.
3. Tukri asks you to confirm it is you (**Confirm password**), unless you did so a short while ago. Type your password and tap **Confirm password**, or tap **Confirm with passkey** if you have a passkey on this device.
   ![Confirm password: the Confirm with passkey button, the password box and the Confirm password button](https://tukri.bd/help-center/en/account-security/confirm-password-phone.webp)

> **Note:**
>
> If you signed up with Google, you may never have set a password. Sign out, tap **Forgot your password?** on the sign-in page and set one from the email, then you can confirm with it.

## Change your password

1. Under **Update password**, type your **Current password**.
2. Type the **New password**, and the same again in **Confirm password**.
3. Tap **Save**.
   ![Update password: Current password, New password, Confirm password and the Save button](https://tukri.bd/help-center/en/account-security/password-phone.webp)

If the current password is wrong, or the new one is too weak, the form says so under the box and nothing changes. If you have forgotten your password, sign out and use **Forgot your password?** on the sign-in page instead.

## Turn on two-factor sign-in

With two-factor authentication on, signing in also asks for a 6-digit code from an authenticator app on your phone, so a stolen password alone is not enough.

1. Under **Two-factor authentication**, tap **Enable 2FA**.
   ![Two-factor authentication with the Enable 2FA button, and Passkeys with the Add passkey button](https://tukri.bd/help-center/en/account-security/two-factor-phone.webp)
2. Scan the QR code with your authenticator app, or type the setup key into the app, then tap **Continue**.
3. Type the 6-digit code the app shows and tap **Confirm**.
4. Tap **View recovery codes** and keep the recovery codes somewhere safe, away from your phone. Each code works once.

When you sign in and your phone is not at hand, tap "login using a recovery code" and type one of those codes.

- **New recovery codes**: tap **Regenerate codes**, then confirm in the sheet that asks **Make new recovery codes?** Your old codes stop working at once, so save the new ones straight away.
- **Turning it off**: tap **Disable 2FA**, then confirm in the sheet. Signing in then needs only your password, and your recovery codes stop working.

If you have lost both your phone's app and your recovery codes, contact Tukri support.

## Add a passkey

A passkey lets you sign in with your device's fingerprint, face or screen lock instead of typing your password.

1. Under **Passkeys**, tap **Add passkey**.
2. Give it a **Passkey name**, such as your phone's name, and tap **Register passkey**.
3. Follow your device's prompt.

Next time, tap **Sign in with a passkey** on the sign-in page. To stop using a passkey, tap the bin icon beside it and confirm with **Remove passkey**.

## Switch off a member who has left

A member who has left should not keep a way into your shop. Switch their account off instead of sharing passwords or deleting anything:

1. Open **Settings** › **Team**.
2. Turn off the switch in that member's row. The row is marked **Inactive**.
3. The next time they tap anything, they are signed out on every device, and the sign-in screen tells them "Your account has been deactivated. Contact your shop owner."

Turn the switch on again to let them back in. Their past sales and records stay in the shop under their name. You cannot switch yourself off: "You can't change your own role or deactivate yourself." A member who is switched off still counts towards your plan's number of users.

## If something goes wrong

**It says "Too many tries. Wait a minute, then try again."** You typed the password wrongly several times. Wait a minute and try again.

**It says "Passkeys are not supported in this browser."** Use another browser, or sign in with your password.

**I do not see the Team page.** Your role cannot manage the team. Ask the shop's owner to switch the member off.

**I want to check that my email address is verified.** The **Verification** section on the same page shows it. See [Verify your email address](https://tukri.bd/help/verify-email).

---
- Source: https://tukri.bd/help/account-security
- Language: English
- In বাংলা: https://tukri.bd/bn/help/account-security
- Last reviewed: 2026-10-22
- Site index for language models: https://tukri.bd/llms.txt