Your account's security settings are in Nextcloud: click your profile icon at the top right → Settings → Security. To log in, see Nextcloud: First steps.

Devices and sessions

In the Devices & sessions section you can see every browser, computer and phone connected to your account. If you see something you don't recognise or you lose a device, click the three dots next to it and Revoke. The device is logged out immediately.

App passwords

An app password is a separate password for one program or device. You mostly need it for WebDAV and for programs that don't have a "Grant access" button.

1. In Devices & sessions, type a name in the App name field (e.g. "Office network drive").
2. Click Create new app password.
3. Copy the username and password shown. The password isn't shown again.

You can revoke each app password separately, without changing your main password.

Two-factor authentication (2FA)

With two-factor authentication, when you log in you enter your password plus a code from a phone app (e.g. Google Authenticator, Microsoft Authenticator).

1. In the Security settings, in the two-factor authentication section, turn on TOTP.
2. Scan the QR code with the phone app.
3. If asked, enter the six-digit code the app shows to confirm.
4. In the same section, click Generate backup codes.

• Download and keep the backup codes. If you lose your phone, they are the only way in.
• With 2FA, the computer and phone apps keep working through "Grant access". For WebDAV and other programs, use an app password.

WebDAV: Nextcloud as a network drive

With WebDAV you connect Nextcloud as a drive on your computer or in programs that support it, without the sync app. The address looks like this:

https://nextcloud-address/remote.php/dav/files/USERNAME/

You can see the exact address under Files → Files settings (bottom left), in the WebDAV section. To connect, use your username and an app password.

• macOS: Finder → Go → Connect to Server and enter the WebDAV address.
• Linux: in your file manager, connect to a server using davs:// instead of https://.
• Windows: mapping a network drive over WebDAV on Windows is often slow and unreliable. Prefer the Nextcloud Desktop app (see Nextcloud: Syncing with your computer and phone) or a program such as WinSCP or Cyberduck.