Your account

Password, two-factor authentication, passkeys, sessions and preferences: these settings concern you only. Open them from the menu under your name: “Account security” or “Preferences”.

Password

“Change password” asks for the current password; your other sessions are closed and an email tells you. Password lost: “Forgot password?” on the sign-in page. Without a password, sign in with a link or a code received by email, a passkey or your organization's single sign-on.

Fields and buttons

Change password: Asks for the current password; your other sessions are closed and an email tells you.
New password: Refused when too short, too common or taken from your name, your email or your organization.
Forgot password: On the sign-in page: a reset link received by email.

Passkeys

A passkey signs you in with Face ID, Touch ID, Windows Hello or a security key, with no password and no code; it counts as two-factor authentication. Add one per device and name it (“Office PC”); “Remove” deletes it.

Fields and buttons

Add a passkey: One per device (computer, phone, security key): your browser asks for Face ID, Touch ID, Windows Hello or the device's code.
Name: To recognize the device in the list and in “Recent activity”.
Remove: This device no longer signs you in with a passkey: for a device lost, sold or handed back.

Two-factor authentication

“Set up two-factor authentication”: scan the QR code with an authenticator app, then enter the 6-digit code. Keep the 10 backup codes, shown only once: each one lets you sign in once if you lose your phone; “Generate new codes” replaces the old ones. When your organization requires it, it cannot be turned off. A trusted device does not ask for the code again for 30 days; “Ask for the code again” cancels that. Phone and backup codes lost: the owner of your organization resets your two-factor authentication (Members); otherwise, write to support.

Fields and buttons

Set up two-factor authentication: Scan the QR code with an authenticator app, then enter the 6-digit code it shows.
Your backup codes: 10 codes shown only once: download them or write them down. Each one replaces the app's code once if you lose your phone.
Generate new codes: Replaces the 10 backup codes; the old ones no longer work.
Turn off two-factor authentication: Asks for a code from the app, and your password if you have one. Not possible when your organization requires it.
Ask for the code again: Your trusted devices ask for the code again at the next sign-in, instead of after 30 days.

Sessions and activity

“Open sessions” lists the devices signed in to your account: “Sign out” signs one out, “Sign out all other devices” keeps only this one. “Recent activity” shows your sign-ins, refused attempts, lockouts and security changes. An unknown device: close its session and change your password.

Fields and buttons

Sign out: Signs this device out at once.
Sign out all other devices: Keeps only the device you are on: after losing a device, on a shared computer or at the slightest doubt.
Recent activity: Sign-ins, refused attempts, lockouts and security changes of the last 90 days. An unknown line: close the session and change your password.

Preferences

Language of the application and of your emails, time zone of the dates and times shown, table density (comfortable or compact). Notifications received by email are set on the Notifications page.

Fields and buttons

Language: Language of the application and of the emails you receive.
Time zone: Dates and times show in this time zone, whatever your device's.
Table density: “Compact” shows more rows on screen in tables.

Your data, leaving, deleting

“Download my data (JSON)”: profile, memberships, sessions and security events about you. “Leave the organization” (Account security) ends your access; your account is kept. “Delete my account” removes your sign-in, sessions and memberships; actions you took stay in the history as “Former member”. Sole owner of an organization: transfer ownership or close it first. The export also lists the actions recorded with your IP address (the 10,000 most recent; the file says when there are more). Deleting the account erases that address from your sign-ins and actions, except on the entry that proves the deletion (12 months) and during a retention hold decided by an organization.

Fields and buttons

Download my data (JSON): A JSON file: profile, memberships, sessions and security events about you.
Delete my account: Irreversible: erases your sign-in, your sessions and your memberships; your actions stay in the history as “Former member”. Not possible while you are the only “Owner” of an organization.
Leave the organization: Ends your access to the organization; your account is kept. The requirements you are responsible for no longer have anyone responsible.