Two-factor authentication, passkeys and the security log

The account area gained the protections you expect from a developer service:

• two-factor authentication with an authenticator app, and recovery codes;
• passkeys, to sign in without a password;
• sign-in with GitHub or Google;
• the list of your sessions, with sign-out from other devices;
• a security log of sign-ins and account changes, and an e-mail when a new device signs in;
• breached-password checks when you choose a password.

Find them under Settings → Password and authentication.