---
key: keep-your-nova-sign-in-secure
title: Change your password and keep your sign-in secure
audience: staff
section: your-profile
routes: ["/profile/security"]
features: ["core.profile"]
since: 0.0.1
updated: 0.0.1
status: published
summary: Tour the Security tab of your profile, change your password or username, act on Nova's security suggestions, and choose which reminders Nova shows you.
keywords: [change password, new password, reset my password, username, account security, security settings, forgot password]
related: [turn-on-two-step-verification-for-your-account, see-where-you-are-signed-in-to-nova, sign-in-to-nova, require-two-factor-authentication]
---

Select your picture or initials at the right end of the top bar, then select **Security** in your account menu. You can also open **Profile** and choose the **Security** tab. The page is headed **My Security**. The page address is `/profile/security`.

From top to bottom the page holds: **Recommended for you** (anything Nova thinks you should do), **Username**, **Password**, **Two-factor authentication**, **Authenticator app**, **Backup codes**, **Passkeys**, **Security setup reminders**, **Impersonation access**, **Session preferences**, **Devices you've used** and **Active sessions**.

## Steps

1. Under **Password**, select **Change password**. The line beside it shows when you last changed it.
2. Type your **Current password**.
3. Type a **New password** and type it again in **Confirm new password**. Hover over the help icon beside **New password** to see what your company requires.
4. Select **Change password**. Nova shows "Password changed." If you were signed in elsewhere, it says how many other sessions it signed out.
5. To sign in with a short name instead of your email, type it under **Username** and select **Change username**. It cannot contain an @ sign. Your email keeps working either way.
6. Under **Security setup reminders**, choose which prompts Nova shows you after you sign in, such as **Passkey setup reminders** or **Primary phone verification reminders**.

## What you see

- A “New sign-in to Nova” email shows the device, approximate location and time. The time is in your profile's time zone and names it in full, for example "Oct 2, 2026 at 10:15 AM Eastern Time (UTC-04:00)", so you can match it against where you were. If it was you, no action is needed. Otherwise, its “Review account security” button opens your signed-in devices and its “Change password” link opens the password form. If you need to sign in first, Nova returns you to that spot.

- **Recommended for you** lists what is still worth doing, such as adding a passkey or confirming your phone. Each item takes you to the right spot on this page.
- If Nova thinks your password may be exposed, the **Password** card turns yellow or red and the button reads **Change now**.
- **Impersonation access** decides whether Nova's own support team may look at Nova as you while they fix a problem you reported. Switch **Allow impersonation** off if you do not want that.

## If something looks different

- A reminder switch cannot be turned off and shows a lock: your company requires that step, or it protects your account recovery.
- Nova asks you to confirm it is you before a change: enter the code or use the passkey it asks for. See [[turn-on-two-step-verification-for-your-account]].
- You forgot your current password: sign out and use **Forgot password?** on the sign-in page ([[sign-in-to-nova]]).
- To see or sign out other computers and phones, see [[see-where-you-are-signed-in-to-nova]].