Account and security
Account settings are personal to you. They apply across every workspace you belong to.
Profile
Section titled “Profile”Open Settings to update your name and avatar. You can also start an email address change here; the new address must be confirmed from the link sent to it.
Password
Section titled “Password”If your account uses email and password sign-in, you can change the password from Settings → Security.
Changing your password signs out your other sessions.
Active sessions
Section titled “Active sessions”The Security page lists the devices currently signed in to your account. You can revoke any session other than the one you are using.
If you see a device you do not recognize, revoke it and change your password.
Two-factor authentication
Section titled “Two-factor authentication”You can add a time-based one-time password (TOTP) authenticator such as Google Authenticator, 1Password, or Authy.
- Open Settings → Security.
- Choose Enable two-factor.
- Scan the QR code or enter the setup key in your authenticator app.
- Enter the six-digit code to confirm.
- Save the backup codes somewhere safe.
Once enabled, sign-in asks for a code from your authenticator after your password.
Why does enabling 2FA ask for my password?
Section titled “Why does enabling 2FA ask for my password?”For accounts that sign in with a password, confirming the password proves that the person making the change knows the account secret, not just that they have an open session.
This matters because adding an authenticator or turning 2FA off are persistent account changes. A stolen session should not be enough to lock you out of your own account or remove your protection.
Accounts that sign in only with Google do not have a password, so they are not asked for one.
Disable two-factor authentication
Section titled “Disable two-factor authentication”Open Settings → Security, choose Disable two-factor, and confirm. Accounts with a password must enter it again.
Delete your account
Section titled “Delete your account”The Security page also contains the account deletion option. Deletion is permanent and removes your access to every workspace you belong to.