Email + password accounts
Requirements: minimum 8 characters; the interface flags a non-compliant password. Good practice: a strong, unique password from a password manager - used nowhere else.
Don't remember your current password?
Sign out and use "Forgot password?" on the sign-in page - a reset link goes to the account's email (valid for a limited time; request a new one if it expires).
Google sign-in accounts
The profile shows a note: password sign-in is not enabled for your account - Google guards your password. Password changes therefore happen in your Google account (myaccount.google.com → Security), not with us. The same goes for two-step verification - you configure it on Google's side, and it automatically protects your GA4audit sign-in.
Related articles: