Go to Settings → Security. This tab is the control centre for account security — two-factor authentication, active sessions, browser extension sessions, and password management.
What's on this tab
Two-factor authentication — enable or disable 2FA, choose between authenticator app and email OTP, and manage recovery codes. See Two-factor authentication.
Change password — update your login password. See Changing your password.
Active sessions — all devices currently logged into your account. Revoke any you don't recognise. See Active sessions.
Extension sessions — separate session list for the browser extension. Revoke individual or all extension sessions.
Delete account — permanently delete your account and all data. This is at the very bottom of the security tab. It's irreversible — see below.
Deleting your account
Scroll to the bottom of the Security tab and click Delete Account. You'll be asked to confirm with your password. Once deleted, your account, aliases, destinations, and all associated data are permanently removed. There's no recovery after this.
If you're considering deletion because of a billing issue or a specific problem, contact support first — it may be solvable without losing everything.