The short version
Both portals have the same security controls under Settings: job seekers in Account & security, employers in Security settings. Turn on two-factor authentication to require a 6-digit code from an authenticator app when you sign in, save the backup codes it gives you, and use Active sessions to check and sign out your devices. If you signed up with Google, your password and two-factor are handled by Google.
Turning on two-factor authentication
Two-factor adds a second step at sign-in, so a stolen password isn't enough on its own. On the security page, find Two-factor authentication ("Not enabled") and click Enable. A short setup opens:
- Scan the QR code with an authenticator app (Google Authenticator, 1Password, Authy, and the like). Can't scan? There's a code you can type in by hand instead.
- Enter the 6-digit code your app now shows, to confirm it's linked.
- Save your backup codes. You'll get a set of one-time codes. Keep them somewhere safe (a password manager is ideal), because you'll only see them once. You'll tick a box confirming you've saved them, then click Done.
That's it: next time you sign in, you'll enter your password and then a fresh code from your app.
Save your backup codes before you finish. They are the way back in if you ever lose your phone or authenticator app. We only show them once, and each one works a single time.
Signing in once two-factor is on
Sign in with your email and password as usual, then enter the current 6-digit code from your authenticator app. You have a few minutes to enter it before the attempt times out and you start over.
Lost access to your app? Enter one of your backup codes instead of the 6-digit code. Each backup code works once. When you're down to a few, the security page nudges you to Regenerate backup codes, which mints a fresh set of ten and retires the old ones.
Turning two-factor off
On the security page, click Disable under Two-factor authentication and confirm with your password or a current code. Sign-in goes back to password only, and you can turn it on again anytime.
Turning two-factor on or off signs you out of your other devices, on purpose, so you re-confirm it's really you. Your current device stays signed in.
If you're locked out
If you lose both your authenticator app and your backup codes, there's no self-service way back in, by design. Reach out to support at support@greenjobsboard.us and the team will verify who you are and help you recover. See Getting help and contacting support.
Active sessions
The Active sessions card lists the devices signed into your account ("Devices currently signed into your account"). Each row shows the device, when it was last active, and its location, with a This device tag on the one you're using.
- Sign out one device. Click Sign out on any other device's row and confirm. It's ended immediately and has to sign in again.
- Sign out everything else. Use Sign out other sessions at the bottom. You stay signed in here; every other device is signed out. It's the quickest fix if you used a shared or public computer and forgot to log out.
Your password
The Password card is where you change your password while signed in: enter your current one, then a new one (at least 12 characters, and please don't reuse a password from another site). If you're locked out instead, use the reset flow from the login page, covered in Resetting your password.
If you signed up with Google
Google accounts don't have a separate password here, so a few controls point you to Google instead:
- Two-factor is managed through your Google account, so the card sends you there rather than showing our setup.
- Password changes happen in Google Account Security.
- Active sessions still work normally, so you can sign out your devices from here as usual.
Good to know
- Backup codes are single-use and shown once. Save all ten when you enable two-factor. Running low? Regenerate for a fresh set.
- An authenticator app, not a text message. Two-factor here uses a code from an app, which is more secure than a texted code and works offline.
- Sign-out is immediate. Ending a session takes effect right away; that device has to sign back in.
- On a shared computer, sign out that session. If you forgot to log out somewhere, "Sign out other sessions" closes it from here.
- Turning two-factor on or off logs out your other devices. Expected, and a good moment to review your active sessions.