Password and security
Change your password, verify your email, and what security features Public does (and doesn't) offer.
Public has two different passwords:
- Your account password — used to sign in to Public. Public can help you reset it via email.
- Your master password for the Password vault — used to decrypt your saved logins. It is never sent to our servers and we cannot reset it. This page is about your account password.
Change your password
On the web
- Sign in and open Settings (
/settings). - Open the Security section.
- Choose Change password, enter your current password, then your new password.
- Save.
On Android
- Open Settings from the Menu tab.
- Open the Security section.
- Tap Password → Change your password.
- Enter your current password, then your new one, then save.
What makes a strong password
- At least 8 characters (the absolute minimum is 6).
- A mix of letters, numbers, and symbols.
- Different from passwords you use anywhere else.
If you use Sign in with Google, your password is managed by Google, not Public.
Email verification
When you sign up with email, you'll receive a confirmation link. Until you click it, your account shows as unverified. Some account changes (like updating your email) require verification.
If you didn't get the email, check spam, then request a new one from the sign-in screen. See Cannot sign in.
Change your email
- Web: Settings → Security → Change email. You'll be sent a confirmation code to the new address.
Sign out
- Web: open the avatar menu and choose Sign out.
- Android: open the Menu tab → Account → Log Out.
Two-factor authentication (2FA)
Public does not currently offer 2FA, recovery codes, or session management. The best protection right now is a strong, unique password plus the email confirmation step. We'll update this page if and when 2FA ships.
Password vault
If you'd like Public to store and sync your logins for other sites end-to-end encrypted, see the Password vault. It uses a separate master password that we never see and cannot reset.
Suspect someone is in your account
- Change your password immediately (above).
- Sign out of all devices you own (sign out from each one).
- If you signed in with Google, sign out of Google on any device that isn't yours and consider changing your Google password.
- Watch your Notifications and posts for activity you didn't do.