Account & security
Protecting your Geoapify account helps prevent unauthorized access to your projects, API keys, usage information, and billing settings.
Account management is divided between two pages:
| Page | What you can manage |
|---|---|
| Account settings | Sign-in email, email verification, and account deletion |
| Security | Password and authenticator apps |
Understand your sign-in method
The available settings depend on how you sign in:
| Sign-in method | Where it is managed |
|---|---|
| Email and password | Change your sign-in email and password in MyProjects. After verifying your email, you can also add authenticator apps. |
| Google, GitHub, or Facebook | Manage your password and primary account security with the external provider. Password and authenticator settings are not available in MyProjects for these accounts. |
Use the same sign-in method you used when creating the account. If you are unsure, try the corresponding Google, GitHub, or Facebook sign-in before resetting a password.
Verify your email
Email verification confirms that you have access to the address associated with your account. A verified email is required before an email/password account can enable two-factor authentication.
To verify your email:
- Open Account settings.
- Find the Verify your email message.
- Open the verification link sent to your email address.
- Return to MyProjects and select I've verified my email.
If the message has not arrived, select Resend verification email. Check the spam or junk folder and confirm that the address displayed in MyProjects is correct. A short cooldown limits how often another verification message can be requested.
Change your password
Email/password accounts can change their password from MyProjects:
- Open Security.
- Select Change password.
- Enter your current password.
- Enter and confirm a new password containing at least eight characters.
- Select Change password.
The current password is required to confirm your identity. Use a unique password that you do not reuse for email, social media, or other services.
Google, GitHub, and Facebook users manage their passwords with the corresponding external provider.
Reset a forgotten password
For an email/password account:
- Open the MyProjects sign-in page.
- Select Forgot password?
- Enter the email address associated with the account.
- Complete the reCAPTCHA check.
- Select Restore password and follow the instructions sent by email.
Check the spam or junk folder if the reset message does not arrive. Google, GitHub, and Facebook users must recover access through their external sign-in provider.
Add an authenticator app
Two-factor authentication adds a six-digit authenticator code after your password during sign-in. It is available to verified email/password accounts.
To add an authenticator:
- Install or open a trusted authenticator app.
- Open Security in MyProjects.
- Select Add authenticator.
- Confirm your current password.
- Scan the QR code with the authenticator app. If scanning is unavailable, enter the displayed secret manually.
- Enter a recognizable name for the authenticator.
- Enter the six-digit code generated by the app.
- Select Add authenticator.
MyProjects supports up to two authenticator apps.
Avoid losing access: MyProjects does not currently provide downloadable recovery codes. Add a second authenticator on another trusted device and keep both devices protected.
Do not share the QR code, manual secret, or verification codes. Anyone with the setup secret may be able to generate valid sign-in codes.
Sign in with two-factor authentication
After entering your email and password, MyProjects asks for a six-digit code from a registered authenticator app.
If two authenticators are registered, select the one you want to use and enter its current code. Authenticator codes expire quickly, so confirm that the device time is correct if a code is repeatedly rejected.
Remove an authenticator
To remove an authenticator:
- Open Security.
- Find the authenticator you no longer want to use.
- Select Remove.
- Confirm your current password.
Keep at least one working authenticator available before removing another. If your authentication session has expired during the operation, MyProjects signs you out and asks you to sign in again.
If you lose one authenticator but still have access to another, sign in with the available authenticator and remove the unavailable one. If you cannot access any registered authenticator, contact Geoapify support.
Change your account email
Email/password users can change their sign-in email:
- Open Account settings.
- Select Change email.
- Enter the new email address and your current password.
- Select Change email.
- Open the verification message sent to the new address.
The new address must not already belong to another Geoapify account.
Changing your Geoapify account email does not update the billing email stored by 2Checkout. Review the billing details for each subscribed project separately. See Billing and subscriptions.
Review project access and API keys
Two-factor authentication protects account sign-in. It does not restrict where an API key can be used and does not make an exposed key safe.
Review account access regularly:
- Remove collaborators who no longer need a project.
- Keep project ownership information current.
- Apply appropriate restrictions to every API key.
- Use separate keys for unrelated applications and environments.
- Replace a key immediately if it may have been exposed.
- Sign out after using MyProjects on a shared device.
See Project sharing and API keys for detailed instructions.
Delete your account
Account deletion is permanent and cannot be reversed.
Deleting your account:
- Deletes every project you own
- Removes the API keys belonging to those projects
- Removes active subscriptions attached to your owned projects
- Removes collaborator access to your owned projects
- Removes your access to projects shared with you
- Deletes your Geoapify user account
Projects owned by other users are not deleted when you remove your account.
Before deleting the account, review your projects, subscriptions, API keys, and collaborators. If another person must retain a project, transfer ownership before deleting your account. Active and pending subscriptions stay attached to the transferred project; the 2Checkout customer and payment method are unchanged.
To delete the account, open Account settings and select Delete your account. Email/password users must confirm their current password. Accounts that use an external sign-in provider must complete the confirmation shown in MyProjects.
Frequently asked questions
1Where can I manage account security?
Open Account settings to manage your email, verification, and account deletion. Open Security to manage your password and authenticator apps.
2Why can't I change my password in MyProjects?
Password changes are available only for accounts that sign in with an email and password. If you use Google, GitHub, or Facebook, manage your password with that provider.
3Why can't I add an authenticator?
Authenticator apps are available to email/password accounts with a verified email address. Verify the account email first and then return to Security.
4How many authenticator apps can I add?
You can register up to two authenticator apps.
5Does MyProjects provide recovery codes?
No. MyProjects does not currently provide downloadable recovery codes. Registering a second authenticator on another trusted device can provide an alternative way to complete sign-in.
6What should I do if I lose access to an authenticator?
Use another registered authenticator to sign in, then remove the unavailable authenticator from Security. If you cannot access any registered authenticator, contact Geoapify support.
7How do I reset a forgotten password?
Select Forgot password? on the sign-in page, enter the email address associated with the account, complete reCAPTCHA, and follow the instructions sent by email.
8Does changing my account email update my billing email?
No. The billing email for a 2Checkout subscription is managed separately for each project. Update it from the project's billing details.
9Does two-factor authentication protect my API keys?
Two-factor authentication protects access to your MyProjects account, but it does not restrict API requests made with a key. Protect each API key with appropriate restrictions and replace exposed keys.
10What should I do if an API key is exposed?
Create a replacement key, update the affected application, and remove the exposed key as soon as possible. Review usage statistics for unexpected activity.
11What happens when I delete my account?
Your owned projects, their API keys, attached subscriptions, and collaborator access are removed permanently. Your access to projects owned by other users is removed, but those projects are not deleted.