At Canva, we are committed to protecting your data and privacy. To help with this, we recommend doing the following for added protection to your account:

Using a social login means you don't need to set or remember a password. After you log in to your provider, they're able to tell Canva who you are.

Passwords should be unique and unpredictable. Using a password manager is the easiest way to set a strong password. It also allows using different strong passwords for all your logins without having to remember all of them.

If you can't use a password manager, we recommend using a password that’s at least 8 characters. Avoid using the following as passwords as well because they’re easy to guess:

• A word by itself
• Recent years
• Straight rows of keys
• Sequences like “abc” or “6543”
• Repeats like “aaa” or “abcabcabc”
• Short keyboard patterns
• Names and surnames
• Context like the website name
• Dates

We also recommend changing your password from time to time.

When multi-factor authentication is set up, you’ll need to enter the 6-digit code generated by your authenticator app each time you log in to Canva to verify it’s you. This helps ensure that you’re the only one with access to your account. See Setting up multi-factor authentication to learn how to set it up.

By signing out of all sessions, you can prevent other people from accessing your account without your permission. For instance, if you forget to log out of your account on a public computer, someone else may use that computer and gain access to your account. To learn how to do this, go to Log out of Canva.

Canva Teams and Canva for Education can use SAML to authenticate users via Single Sign-On (SSO). Team administrators and owners can set this up.