Profile, password and sessions
Change your name, email, avatar and password; turn on two-factor authentication; see and sign out of active sessions.
Profile
Settings, Profile: name, email and avatar. Changing your email sends a verification link to the new address; the old address keeps working until you click it.
Password
Set a new password with your current one. If you have forgotten it, sign out and use "Forgot password" on the sign-in page; the reset link expires in one hour.
Two-factor authentication
Settings, Profile, Two-factor: scan the code with an authenticator app and enter the six digits. You get ten backup codes; store them somewhere safe. Owners of Brokerage plans can require two-factor for every member.
Sessions
The Sessions list shows every device signed in with its last activity. Sign out of one, or all others, from here. Changing your password signs out every other session.
Single sign-on
SSO for brokerages is planned. Until it ships, brokerage admins can require two-factor and manage seats from Team.