Account security

The Account security screen opens from your account menu (your name, at the bottom of the left menu). It is available to everyone, whatever your role in the garage. If you do not have a garage yet, it opens from the Create your garage screen (Account security link, next to Sign out); Back takes you there again.

Change your password

1. Enter your current password, then the new one (at least 10 characters) twice.
2. Choose Change password.

You stay signed in on this device; all your other devices are signed out. An email confirms the change: if you did not ask for it, use Forgot your password? on the sign-in screen right away.

Change your email address

1. Enter the new address and your current password. If two-factor authentication is on, also enter the 6-digit code from your authenticator app.
2. Choose Send the confirmation link.
3. Open the link received at the new address in the browser where you are signed in to Garage+ (otherwise, sign in first: you then come back to the confirmation). The link is valid for 1 hour, once; only the latest link requested works.

Your current address receives a notice and stays valid until the confirmation. If the new address cannot be used, no link arrives: for security, Garage+ does not say whether an address is already used by another account.

Turn on two-factor authentication

With two-factor authentication, after your password Garage+ asks for a 6-digit code that changes every 30 seconds.

1. Enter your current password, then choose Enable.
2. Install an authenticator app if you have none (any TOTP-compatible app works: Aegis, FreeOTP, 2FAS, Google Authenticator, Microsoft Authenticator, etc.).
3. Add an account in the app: the simplest way is to scan the QR code shown on screen with the app’s camera. You can also type the key shown below the QR code (spaces do not matter); on a phone, the Open in the authenticator app link adds it directly.
4. Enter the 6-digit code shown by the app, then choose Confirm.

The QR code and the key are shown only once, during activation: do not show them to anyone and do not photograph them with another device.

Backup codes

On confirmation, Garage+ shows backup codes. Write them down somewhere safe: they will not be shown again. Each code works once, if you lose your phone.

To get new ones, enter your password then choose New backup codes: the old ones stop working.

A code works only once

An app code cannot be used twice. If it is refused although correct, it has just been used: wait for the next code (30 seconds at most) and enter it.

Turn off two-factor authentication

Enter your password then choose Disable. This action does not exist for an operator account: two-factor authentication is mandatory there.

Signed-in devices

The list shows the devices signed in to your account (only the start and expiry dates are shown). For account security, Garage+ also keeps, for each sign-in, the IP address and browser type used, until the session expires or is closed; this information is not shown on screen.

If a device is lost or stolen, choose Sign out all other devices: only the device you are using stays signed in. Also change your password (Change your password section above).