1.  Please visit the [Xcalibra website](https://xcalibra.com/) and ***Sign in*** to your account.  
      
    
2.  After you have logged in, please click on ***Settings***.  
      
    ![xca8.png](/uploads/360005451819_360006111740_xca8_546d6493c9.png)    
      
    
3.  On the left side under Settings, click on ***ACCOUNT***.  
      
    ![xca19.png](/uploads/360005451819_360006140099_xca19_cdabbd1565.png)    
      
    
4.  Find the **Password** section and click on the ***CHANGE*** button.  
      
    ![xca20.png](/uploads/360005451819_360006141179_xca20_0a39421671.png)    
      
    
5.  You will get the form where you can create new password. Be sure to fill all the fields.   
      
    ![xca21.png](/uploads/360005451819_360006113260_xca21_9aada3a409.png) 
6.  After that, you will receive a confirmation email.  
      
    
7.  Click ***CONFIRM*** within this email and your password will be changed.

How to change your password?

1.  Please visit the [Xcalibra website](https://xcalibra.com/) and ***Sign in*** to your account.  
      
    
2.  After you have logged in, please click on ***Settings***.  
      
    ![xca8.png](/uploads/360005409360_360006141979_xca8_d76fc21884.png)    
      
    
3.  On the left side under Settings, click on ***ACCOUNT***.  
      
    ![xca19.png](/uploads/360005409360_360006142039_xca19_635f886e22.png)    
      
    
4.  Find the **Email Address** section and click on the ***CHANGE*** button.  
      
    ![xca22.png](/uploads/360005409360_360006114020_xca22_9839a4f23c.png)    
      
    
5.  Enter your **new email address**, fill all the fields and then click ***SAVE***.   
      
    ![xca23.png](/uploads/360005409360_360006113940_xca23_2f1334f87c.png) 
6.  Once submitted, you will receive a confirmation email at your old address.  
      
    
7.  Click ***CONFIRM*** within this email and your account email will be changed.

How to change your email address?

## **How to enable 2FA**


1. After you have logged in, please click on ***Settings***.  
      
    ![xca8.png](/uploads/360005451419_360006132199_xca8_19c9e0d0fd.png)    
      
    
2.  On the left side under Settings, click on ***SECURITY***.  
      
    ![xca99.png](/uploads/360005451419_360006104060_xca99_1a910a6a23.png)    
      
    
3.  Find the **Two Factor Authentication** section and click on the ***ENABLE*** button.  
      
    ![xca10.png](/uploads/360005451419_360006104240_xca10_7e3cdf4072.png)    
      
    
4.  When you click on ***ENABLE***, you will get a ***QR code*** and 16-digit authenticator ***key code***. 

5.  Open Google Authenticator/Authy app on your phone and ***scan the QR code***.  
      
    How to scan the code? Open the Google Authenticator/Authy App and click on the **"+"** button. Select ***Scan a barcode*** and point the phone to the screen. Please ensure you keep a **backup of your 16-digit authenticator key code**. Write it on a piece of paper and store in a secure location, for example.  
      
    
6.  After you have scanned the code, please click the ***NEXT*** button.   
      
    ![xca11.png](/uploads/360005451419_360006105880_xca11_a79ef2c63e.png) 
7.  Then enter the six-digit code from your App to the Box and click ***SUBMIT***.  
      
    ![xca12.png](/uploads/360005451419_360006134799_xca12_47f681c817.png)    
      
   Now, every time you want to log in or perform some security-sensitive action, you will be prompted with an additional verification step.

## **How to disable 2FA** 

1.  After you have logged in, please click on ***Settings***.  
      
    ![xca8.png](/uploads/360005451419_360006136799_xca8_831b897bef.png)    
      
   
2.  On the left side under Settings, click on ***SECURITY***.  
      
    ![xca99.png](/uploads/360005451419_360006108500_xca99_31c27ef95e.png)    
      
    
3.  Find the **Two Factor Authentication** section and click on the ***DISABLE*** button.  
      
    ![xca14.png](/uploads/360005451419_360006136919_xca14_f7f32695d5.png)    
      
    
4.  After that, click on ***CONTINUE***.  
      
    ![xca15.png](/uploads/360005451419_360006108760_xca15_b248af6059.png)    
      
    
5.  You will be asked to enter an Authentication Code in order to finish the process.   
      
    ![xca16.png](/uploads/360005451419_360006137119_xca16_3f97fb90bb.png) 

6.  Open the **Google Authenticator**/**Authy** **App** on your phone and find the 6-digit code. Enter that code and finish the process. 

**How to keep a session alive**

1.  After you have logged in, please click on ***Settings***.  
      
    ![xca8.png](/uploads/360005451419_360006109180_xca8_172ccb167b.png)    
      
 
2.  On the left side under Settings, click on ***SECURITY***.  
      
    ![xca99.png](/uploads/360005451419_360006109200_xca99_8eb725914a.png)    
      
    
3.  Find the **Keep session alive** section and ***check the box***.  
      
    ![xca17.png](/uploads/360005451419_360006138479_xca17_58f0239fe9.png)    
      
    When logged in but inactive, your browser will ping the platform every 10 minutes to ***keep your session alive***. If disabled, your session will expire after 30 minutes of inactivity.

## **How to enable IP Security**

1.  After you have logged in, please click on ***Settings***.  
      
    ![xca8.png](/uploads/360005451419_360006110720_xca8_7eefaac51b.png)    
      
    
2.  On the left side under Settings, click on ***SECURITY***.  
      
    ![xca99.png](/uploads/360005451419_360006110760_xca99_b63b2b2349.png)    
      
   
3.  Scroll down and find the **Geolocation pinning** section.  
      
    ![Geolocation ip security.png](https://cms.xcalibra.com/uploads/Geolocation_ip_security_0324a9ee00.png)
      
    
4.  Here you can view the **IP addresses** of your requests and log out in case of unusual or suspicious activity. *You can pick from three types of IP security settings:* **Off** - We will not perform any IP checks once your session is established. **Loose** - You will be able to roam within a certain range between requests. This is a suitable setting if you like to trade on your phone or laptop. **Strict** - Every request must come from the same IP address. This is suitable if you're using a desktop computer with a stable internet connection, or a fixed VPN.
 