# Keep your account secure (Help)

URL: https://qrdx.dev/docs/help/privacy-and-security/account-security
Source: https://github.com/bucharitesh/qrdx/blob/main/apps/docs/content/docs/help/privacy-and-security/account-security.mdx

How sign-in works, how to sign out other devices, and how to report a security problem.

## No password to leak [#no-password-to-leak]

QRdx has no passwords. You sign in with Google, GitHub or a one-time code sent to your email.

That makes your email account, and your Google or GitHub account, the keys to QRdx. Turn on two-step verification for them.

QRdx doesn't have its own two-step verification (2FA) or passkeys.

## Sign out other devices [#sign-out-other-devices]

Go to **Settings** → **Account**. Under **Sessions**, sign out of one device, or click **Sign out everywhere else**.

## Remove apps you connected [#remove-apps-you-connected]

If you let another app use your QRdx account, it's listed under **Settings** → **Authorized apps**. Remove any you don't use.

## Sensitive actions need a code [#sensitive-actions-need-a-code]

Deleting your account asks for a code sent to your email. Changing your email address needs a recent sign-in and a code sent to the new address.

## Report a security problem [#report-a-security-problem]

Email [support@qrdx.dev](mailto:support@qrdx.dev) with a subject starting `[security]`. Please don't post it in public GitHub issues. See the [security policy](https://qrdx.dev/legal/security).

A harmful QR code isn't a security bug: [report it](https://qrdx.dev/docs/help/privacy-and-security/report-abuse) instead.
