Turn on two-step verification in Settings → Security & privacy. SMS codes expire after 10 minutes.
- Sessions lists every signed-in device; sign out any you don't recognise.
- We will never ask for your password or a code by phone, email or chat.
- Locked out? Use Forgot password; if you lost your second factor, contact support from the email on your account.