Account Security

Backup email and phone, password reset, and two-factor authentication. Changes apply immediately.
Backup Email
Stored for account recovery — if you lose access to your primary email, support can use it to verify you. Password reset links still go to your primary email. Never used for marketing. To remove it, clear the box and press Save.
Backup Phone
Stored for account recovery — support can use it to verify you. We don’t send texts. US/Canada format: +1 (555) 000-0000. To remove it, clear the box and press Save.
Password
Set a new password here. Or email yourself a reset — it carries a code that works on any device, plus a link for this one.
🔐 Two-Factor Authentication (TOTP)
Save an authenticator app as a second sign-in step. The line below says whether sign-in asks for its code.
Loading 2FA status…
Step 1. Scan this QR code with your authenticator (Google Authenticator, Authy, 1Password, etc.):
Generating…
Or enter this code manually in your app:
Step 2. Enter the 6-digit code your app shows:
🔐 Save your recovery codes. These ten single-use codes are your way back in if you ever lose your authenticator. They're shown once — copy, download, or print them now and store them somewhere safe. Each code works a single time.
⚠️ We couldn't issue recovery codes right now. A password reset doesn't remove your authenticator. To remove it, email support@gcprep.app from your account's email so we can confirm it's you. Keep that mailbox (and a backup email above) reachable. You can also retry with Regenerate recovery codes on this page anytime.
Use any standard authenticator app (Google Authenticator, 1Password, Authy, Microsoft Authenticator, etc.). You'll need the app handy to finish setting it up.