Both are in Settings → Account, under Sign-in.
Email address
Type the new address and save. Involets sends an eight-digit code to the new address, and nothing changes until you enter it, so a typo cannot lock you out.
Password
Use the password form beside it to set a new one. It must be at least eight characters long.
If two-factor is on, both changes ask for a code from your authenticator app first, unless this sign-in has just passed one.
More in account and security
Turn on two-factor sign-in
Use an authenticator app, keep your recovery codes, and know when a code is asked for.
See your devices and sign them out
Check where you are signed in and end any of those sign-ins.
Did not find your answer?A person answers support tickets, usually within a working day.
Ask a person
Next: Delete your account