Protect account access, passkeys, and SMS MFA deliberately

How to proceed

1. 1Review profile name and email address in web Settings. To change email, NEXO first confirms the current password and then sends verification to the new address; finish the change only after that verification.
2. 2Change a password only after entering the current password and use a unique, long password. Sign out on shared devices and never share a password, SMS code, or passkey.
3. 3Verify email when needed through the verification link. The sign-in-history display records local browser activity and does not infer a location.
4. 4When the Passkeys card is available in web Settings, name and register a passkey on the device, then delete it there when required. A passkey belongs to your own account and device and is never shared with Family members.
5. 5Add and verify a phone number first if you want to use SMS MFA. Saving a phone number does not by itself enable MFA.
6. 6Then choose Enable MFA, send the six-digit SMS code to the verified number, and confirm it. At the next password sign-in, NEXO requests that second factor; MFA can also be disabled after confirmation.
7. 7If NEXO asks for a recent sign-in before a passkey or MFA change, follow the confirmation dialog. Never send passwords, complete card data, or security codes to Support.