# Security

> How you sign in to Endless without a password, and where to manage two-step verification, passkeys and signed-in devices for your account.

Source: https://endless.okinawa/docs/settings/security

**Settings → Account → Security** controls how you sign in. It applies to your account in every
workspace, and every member can open it. The same settings are at
[accounts.endless.app/user](https://accounts.endless.app/user).

## How you sign in

Sign in with **Google**, **Microsoft**, a code emailed to your address, or a passkey once you've
added one. A password isn't used to sign in.

## Settings

| Setting               | What it does                                                 |
| --------------------- | ------------------------------------------------------------ |
| Password              | Optional. Not needed to sign in.                             |
| Two-step verification | Adds a second factor on top of the password.                 |
| Passkeys              | Sign in with your device's fingerprint, face or screen lock. |
| Active devices        | Lists signed-in sessions. End any you don't recognize.       |

This panel comes from Endless's sign-in provider, so its wording and options may differ from
the rest of the app.

To sign out, open the workspace switcher at the bottom of the sidebar and choose **Sign out**.

## Not on this page

* What you can do in a workspace depends on your role. See [Roles and
  permissions](/docs/governance/roles-and-permissions).
* Who can see your work is set per item. See [Assets and
  visibility](/docs/concepts/assets-and-visibility).