Upgrade
Account protection

Security center.

Review OAuth, passkeys, 2FA, sessions, login risk, recovery, and admin security controls from one protected workspace.

Security center2FA
Security readinessReady

Available for account review

Unsafe automationBlocked

Available for account review

Secret storageBackend-only

Available for account review

Admin impersonationBlocked

Available for account review

Account security map

Security centerPasskeys2FASessionsActivityRecovery
FactorStatusDetail
PasswordactiveEmail and password remain supported with rate-limit and lockout controls.
Google OAuthcode readyGoogle login, signup, and account linking use verified provider profiles, state checks, and backend-only token handling. Production still requires Google Cloud OAuth setup.
Passkeyscontract readyChallenge lifecycle, credential ownership, counters, and revocation safeguards are defined.
Authenticator appsetup readyTOTP enrollment is backend-only and requires verification before becoming active.