Your free account can still hold live API tokens and real sending history, so it deserves the same login protection as a paid one. Starting today, you can turn on two-factor authentication on any Postmark plan.
What's new. On the free Developer plan, App authentication is the method available. Use Google Authenticator, Authy, or 1Password to generate your codes.
What's staying the same. SMS authentication remains a Basic-and-above feature. If you already have SMS authentication set up, your confirmed number keeps working exactly as it does today, even if your account moves to the free Developer plan. What you can't do on the free plan is add SMS as a new method.
Turn it on from Profile → Security, and save your backup codes while you're there. On the free plan those codes are your only way back in, so keep them somewhere you can reach without your phone.
