Reference

Account security: getting in, taking everything, leaving.

The Security tab of your account settings brings together two-step verification, exporting all your data and deleting the account: this page explains how each one is set up and what exactly happens when you use it. At the very top there is also Analytics cookies, to accept or reject Google Analytics; the app works the same either way.

Signing in

Two-step verification

A code from your authenticator app on top of your password. If someone steals your password, it is not enough to get in.

  1. 1
    Open the tabThe circle with your initials, top right → Account settings → Security, and hit Turn on under two-step verification.
  2. 2
    Scan the codeWith whichever authenticator app you use — the three most common ones are walked through below. If you cannot scan, open Can't scan? Type the key in manually, under the QR, and copy the key.
  3. 3
    Confirm with the codeType the six digits your app is showing at that moment and hit Turn on. Only then is it active.
  4. 4
    Save the recovery codesThey are shown once, right after you enable it. Copy them into your password manager or onto paper — anywhere except the same phone that holds the authenticator app.

Which app?

Already on your iPhone, iPad and Mac, and it fills the code in for you when you sign in.

  1. 1
    Open PasswordsThe Passwords app on your iPhone, iPad or Mac, and open the secondbrain password you already saved.
  2. 2
    Set Up Verification CodeTap it and pick Scan QR Code. If the QR is on that same screen, use Enter Setup Key and paste the key.
  3. 3
    DoneThe six-digit code lives inside that entry and autofills when you sign in.

Any app that makes six-digit codes works: 1Password, Authy, Bitwarden or whatever you already have.

From then on, every sign-in asks for the code as well as the password. The tab shows how many unused recovery codes you have left, and from there you can generate new ones — which void the previous set — or turn verification off.

If you lose your phone

Each recovery code gets you in once, and is then spent. That is why where you saved them matters: if they live on the same phone as the authenticator app, they are worth nothing on the day you need them.

Once you are back in with a code, the first move is to generate new codes and set verification up again on the new phone.

Taking it all, or leaving

Export all your data

Under Export all my data, the Download ZIP button builds it on the spot and downloads it. No emailing support, no waiting for approval.

Inside there is one folder per workspace, with:

  • Your documents in Markdown, which is the format that will still be readable anywhere.
  • The data in JSON: daily notes, tasks, meetings and their action items, Atlas entities and their links, canvases, definitions, deliverables and the digests generated.
  • The files inside the ZIP, not as links: up to 150 MB per workspace. Whatever does not fit is still listed, with a download link that lasts seven days — the limit is disclosed, not hidden.
  • A summary of what was included and what was left out.

Integration tokens and secrets never leave in the export.

Delete the account

It sits last in the tab — on the phone, More → Settings → Delete account — and runs through three screens: what gets deleted, why you are leaving and the confirmation, where you type ELIMINAR and, if you sign in with a password, your password.

On confirm it wipes, permanently and with no grace period: your account and profile, your daily notes, documents and tasks, your meetings and their recordings, your workspaces and the files you uploaded.

If you paid for your subscription on the web or the computer, it cancels itself. If you bought it on the iPhone, Apple bills it and deleting the account does not stop it: cancel it in your Apple ID subscriptions.

Download the export ZIP before you confirm: afterwards there is nothing left to ask us for.

Shall we try it?

Create your free account and use all of this today.