Skip to main content

Account settings

Open Settings (/settings) for Account, Security, Preferences, Notifications, and Billing.

Account​

  • Set or update your email (stored normalized).
  • Verify email with a one-time code when mail delivery is configured (MailerSend or your deployment’s mail provider).

Security​

Password​

Local accounts can change password from settings. Directory / Google accounts keep credentials at the identity provider.

Email OTP 2FA (local accounts)​

  1. Verify an email address first.
  2. Enable email OTP 2FA under Security.
  3. Save recovery codes shown once — each code is single-use.
  4. On next sign-in, enter password, then the email code (or a recovery code).

Google / Domain accounts rely on the IdP’s MFA; in-app email 2FA is for local accounts only.

Sessions​

  • Review active refresh-token sessions (device / IP when available).
  • Revoke a single session or all others if a device is lost.

Preferences & notifications​

  • Toggle email categories such as security, billing, and agent-failure notices (security mail respects the preference flag when implemented).
  • Billing settings depend on whether commercial billing is enabled for your deployment.

Tips​

  • Prefer verifying email before enabling 2FA.
  • Revoke unknown sessions immediately and rotate passwords/API keys if you suspect compromise.
  • Operators: ensure transactional mail (MailerSend__* or equivalent) is configured before relying on OTP in production.