Your profile and account security

Overview

Your profile is yours: there you change your name, email, language and password, turn on two-factor authentication and close sessions you left open. No special permission is needed. What an admin controls (role, warehouses, permissions) is in Manage users.

How to get there

Click your name at the top right and choose Profile. This page currently shows in the system’s default language whatever yours is. Its sections, in order: Profile Information, Update Password, Two Factor Authentication, Browser Sessions and Delete Account.

Profile information

Name — how you appear in assignments, logs and the audit log.
Email — what you sign in with. Must be unique in the system.
Language — English or Spanish. See Change language and warehouse.

Click Save in that section.

Change your password

In the second section enter your current password.
Enter the new one (at least 8 characters) and confirm it.
Save. Next time you sign in with the new one.

Two-factor authentication

With two-factor authentication, besides your password the system asks for a six-digit code from an authenticator app on your phone.

In the third section, click the button to enable it. The system asks you to confirm your password in a window.
Scan the QR code with your authenticator app, or type the setup key shown below it.
Enter the code the app shows to confirm.
Store the recovery codes that appear somewhere safe: each works once to sign in if you lose your phone.

From the same section you can show or regenerate the recovery codes, or turn two-factor off.

Sessions in other browsers

The fourth section lists the devices where your session is open. The button to log out other browser sessions asks for your password and keeps only the current one open. Use it if you signed in on a shared computer or lost a device.

Delete your account

Important: the last section lets anyone delete their own account, even the only super admin. A deleted account cannot be recovered from any screen and its email stays taken. Don’t use it: if you are leaving the company, ask your admin to deactivate you. If you are the only super admin, appoint another before any change to your account.

If you forgot your password

On the sign-in screen use the forgot-password link: you get an email to create a new one. If your account is deactivated, the email will not help; talk to your admin.

Example: you lost your phone

Ana López has two-factor on and loses her phone on Friday. From the office computer she signs in with her password and, instead of the app code, uses one of her recovery codes. On her profile she logs out other browser sessions, turns two-factor off and back on with her new phone, and stores the new recovery codes.

Good practices

Change the initial password your admin gave you on day one.
Turn on two-factor if you have the admin or super admin role.
Keep your recovery codes somewhere other than your phone.
Log out on shared computers.

Troubleshooting

My profile is in English even though I chose Spanish.

Expected on that page for now. The rest of the system follows your language.

The app code does not work.

Make sure your phone’s time is set automatically; codes depend on it. Otherwise use a recovery code.

My correct password does not work.

Your account may be deactivated. The message is the same as for a wrong password. Talk to your admin.