Your password, Two-Factor Authentication, and API tokens are all managed from one Security page.
Manage your account details and security from your profile, reached through your avatar in the lower-left corner of the CMS.