Sign-in methods
- Email and password — the classic route. You change the password in Settings.
- Google account — no new password to invent and no confirmation email to wait for. You have to sign in with the same method the account was created with.
- Forgotten password — request a new one by email from the sign-in screen.
Two-factor authentication
Two-factor authentication (2FA) means a second proof alongside the password: a time-based one-time code from an authenticator app on your phone. It is the single most effective step you can take to protect the account — on its own, a leaked password is then not enough to sign in.
Switching it on:
Open Settings
Two-factor authentication is among the security settings.
Scan the code with an authenticator app
Any of the usual authenticator apps will do.
Enter the first code to confirm
This proves the app works and that you are not locking yourself out.
Save the backup codes somewhere safe
They let you sign in even if you lose your phone. Do not store them on the phone.
The forms of access attached to your account
Your password and 2FA protect your own sign-in. Beyond that, several other kinds of access exist against the account — worth reviewing quarterly:
| What is it? | Where to check | When to revoke |
|---|---|---|
| Team members' access | Team page | When somebody has left, or no longer works on the brand. |
| Channel connections (WordPress, social) | Integrations page | When you no longer publish to that channel, or the permission is broader than needed. |
| Shareable review links | At the piece where you created it | When the client engagement or that piece is finished. |
| API keys (Scale) | Settings | When the integration has ended, or the key could have leaked. |
Does Pagioo sign me out if I am away for a long time?
The session lasts a long time: you do not have to retype a password every day. If you change your password or revoke access, existing sessions become invalid.
What if a team member's password leaks?
Revoke their access on the Team page and ask them to come back with a new password and two-factor authentication switched on. Review the channel connections too if they had settings rights.
Can I delete my account?
Yes, you can start an account deletion and a data request — see Data and AI providers and the Hungarian privacy policy.