Two-factor authentication, often shortened to "2FA", is an extra check when you sign in. After you type your password, the app or website asks for a second short code (often from a text message or an app on your phone) before letting you in. It is a useful extra layer of safety.
We want to be honest with you about where MigraineMe stands today.
The short answer
MigraineMe does not currently have its own built-in two-factor authentication.
We do not ask for a second code when you sign in. Your account is protected by one layer, depending on how you signed up:
- If you signed in with Apple, your protection is whatever you have set up on your Apple ID.
- If you signed in with Google, your protection is whatever you have set up on your Google account.
- If you signed in with Facebook, your protection is whatever you have set up on your Facebook account.
- If you signed in with email and password, your protection is your MigraineMe password, plus your email account, because password reset links go there.
What you can do right now
Here are simple things you can do to keep your account safe:
1. Use a strong, unique password
If you signed up with email and password:
- Make it at least 12 characters long.
- Use something that is not the same as any other password you have.
- See our article Changing your password for step-by-step help.
2. Turn on 2FA where MigraineMe relies on it
If you signed in through Apple, Google or Facebook, the best thing you can do is turn on 2FA in that company's own settings. Those settings then protect your MigraineMe account too, indirectly.
On your iPhone:
- Open the Settings app.
- Tap your name at the very top.
- Tap Sign-In & Security.
- Tap Two-Factor Authentication and follow the steps.
For your Google account (iPhone or Android):
- Open the Gmail app or go to myaccount.google.com.
- Tap your profile picture in the top-right.
- Tap Manage your Google Account.
- Tap Security.
- Tap 2-Step Verification and follow the steps.
If you do this, then even someone with your password cannot get into your Apple or Google account, and therefore cannot get into MigraineMe.
3. Protect the email address on your account
Your account is tied to an email address. If someone can read your email, they could reset your MigraineMe password. So protecting your email is also protecting MigraineMe. Most email providers (Gmail, iCloud, Outlook) offer their own 2FA. Turning that on is a very strong step.
If you are worried about a specific risk
If you have reason to think someone may have got into your account (for example, if you see migraines you did not log, or your display name changed on its own), please:
- Change your password right away (see the article Changing your password).
- Email help@migraineme.app and let us know. We can sign your account out from our side and help you secure it.
Thank you for taking your privacy seriously. We are taking it seriously too.
