# Account & sync

## Sign in
If you are already signed in on your phone, use QR sign-in:

1. Open the [web sign-in page](/en/login).
2. Tap Scan at the top of your profile in the mobile app and scan the QR code.
3. Check that the verification code, browser and account match, then confirm on your phone.

The QR code expires after 3 minutes. Select Refresh QR code to try again. Scanning alone does not sign the browser in: confirmation on your phone is required. Reject requests from pages you are not signing in to.

You can also sign in with the same Apple account as the mobile app.

## Two-factor authentication
Open the account menu at the top right, then Account settings → Two-factor authentication → Enable 2FA. Scan the QR code with a TOTP authenticator, or expand the setup key to add it manually, then confirm with a 6-digit code. You may need to sign in again before setup.

Once enabled, both Apple and phone QR web sign-ins require a verification code. Creating an access token requires 2FA. Token creation, data exports, recovery-code regeneration and disabling 2FA require verification within the last 5 minutes; the current action prompts you when needed.

Save the 8 recovery codes shown during setup. Download or copy them to a safe place. Each works once, and the original codes cannot be viewed again after closing the dialog. Choose Use a recovery code when your authenticator is unavailable. Generating new codes in account settings immediately invalidates all old codes.

Enabling or disabling 2FA signs out other devices. Sign in again on your phone and watch; activity records are kept. Regular mobile and watch sign-ins still use Apple and do not require the website's authenticator code. Existing API tokens keep their scopes and expiration dates; revoke them from Developer when needed.

Keep setup keys, QR codes and recovery codes private. If you lose both your authenticator and recovery codes, [contact support](/en/contact); an email address alone cannot authorize disabling 2FA.

## Local records
Activities recorded without signing in stay on the device. You choose whether to merge them after signing in on your phone. Records you have not agreed to merge do not upload automatically. The website shows only data synced to the current account.

## Sign out
Signing out ends only the current web session. Your phone and watch stay signed in. Sign in again when your session expires to continue viewing your records.

## Missing records
Account records sync automatically when a connection is available, and the web activity list updates automatically. Check that the account at the top right matches your phone. If uploads are delayed, local records are kept and sync retries automatically. If records are still missing, [send feedback](/en/contact). Do not delete your account or local records to troubleshoot sync.