---
title: "Password, 2FA, and sessions (keep the account yours)"
url: "https://smpfund.com/help/security"
language: "en"
---

# Password, 2FA, and sessions (keep the account yours)

Set a website password if you used Google, turn on two-factor authentication, and sign out unknown devices. Support will never ask for recovery codes in a ticket.

5 min read

## Step 1: Open Security and turn on the extra lock

Open [Security](https://smpfund.com/account/security). If you only used Google, set a website password so you can use [Forgot password](https://smpfund.com/forgot-password) later. When 2FA is offered, choose email codes or an authenticator app. Revealing the trading password on [Credentials](https://smpfund.com/account/credentials) uses this same extra step.

Keep recovery codes private. If someone in chat asks for them, it is not us — open [Tickets](https://smpfund.com/account/tickets) on this site only.

![Annotated screen: Open Security and turn on the extra lock](https://smpfund.com/help/screenshots/security.webp)

- 2FA

## Step 2: Review sessions; closing the account is permanent

On the same [Security](https://smpfund.com/account/security) page, the sessions list shows devices still signed in. Sign out anything you do not recognize.

Closing the account is irreversible and lives on this page — only use it if you intend to leave. Language and theme are not here; they are under [Language](https://smpfund.com/account/language) and [Appearance](https://smpfund.com/account/theme).

![Annotated screen: Review sessions; closing the account is permanent](https://smpfund.com/help/screenshots/security.webp)

## Open these pages

- [Security](https://smpfund.com/account/security)
- [Forgot password](https://smpfund.com/forgot-password)

## Related guides

- [Credentials vault: where the MetaTrader password lives](https://smpfund.com/help/credentials): This is the only panel page that can show the trading password. Reveal asks for extra proof (site password or email code). Never paste that password into any other website.
- [Create a website account (step by step)](https://smpfund.com/help/create-account): First you only create a login for this website (email + password, or Google). That is not a MetaTrader account and not a purchased challenge. Confirm the email or the trader panel stays locked.
- [Sign in to the website (not MetaTrader)](https://smpfund.com/help/sign-in): The Sign in page is only for this website. MetaTrader has a separate login, password, and server that appear later under Credentials. Mixing the two is the most common beginner mistake.
- [Profile, language, appearance, notifications, my data](https://smpfund.com/help/account-settings): These pages change how the website looks and how we email you. They do not change MetaTrader, challenge rules, or payout eligibility. Match your legal name to KYC.