Settings
Manage your sign-in details and account profile.
Authentication strength
On the Settings overview, the card titled "Authentication strength" shows your sign-in type (Weak or Strong) first. If you have a temporary step-up window, you will also see Step-up active until with a date and time. That line only appears while the window is open.
Those are two different ideas: a lasting sign-in type, and an optional short step-up period that does not replace Strong when it ends.
Your sign-in type: Weak or Strong
This stays the same until you sign out or sign in a different way. It is not the same as Step-up below.
Weak
You signed in with a magic link or similar. You can browse and engage, but cannot update your profile, change your handle, or perform other sensitive actions. Sign in with password or OAuth for full access.
If you see this after opening a link from email, that is expected. Use Your details and security to sign in with a password or OAuth, or use "Confirm password" on the Settings overview when offered.
Strong
You signed in with password or OAuth. You can update your profile, create content, and perform most account actions.
Step-up: a short-lived extra check (not a permanent third level)
Step-up means we are treating your session as freshly reauthenticated for a limited time after you entered your password (for example after login, "Confirm password", or similar). It is time-limited.
You recently reauthenticated. You can perform security-critical actions such as changing your handle.
When that window ends, you are still signed in with a Strong session if that was your sign-in type. We simply stop counting you as "just reauthenticated" for the most sensitive changes until you confirm again.