Account and security

Manage your account · 16

Account and security

Update your profile, password, two-factor authentication, passkeys, AI app connections that sign in to UX Robot and appearance, see how website analytics works, and delete the account.

9 min read Updated 24 October 2026

01 / Profile

Keep your identity and password current

Open the user menu and select Settings.

  • On Profile, update your name or email address and select Save. A changed email needs confirming again before you can upgrade or invite your team.
  • On Security, enter the current password, a new long and unique password, and confirmation, then select Save.
  • Security settings may require recent password confirmation before they open.

Use an individual account rather than sharing credentials. Organisation access can be granted through Team without sharing the owner login.

02 / Two-factor authentication

Protect sign-in with a time-based code

  1. Open Settings → Security.
  2. Under Two-factor authentication, select Enable 2FA.
  3. Scan the QR code with a TOTP-compatible authenticator app, or enter the manual setup key.
  4. Enter the six-digit code from the authenticator and confirm setup.
  5. Store the recovery codes in a secure location separate from the device used for authentication.

At sign-in, enter the current authenticator code when prompted. If the authenticator is unavailable, use one unused recovery code. Regenerating recovery codes invalidates the old set.

03 / Passkeys

Add passwordless sign-in on a trusted device

Passkeys use a supported browser, device, security key, or password manager to authenticate without typing the account password.

  1. Open Settings → Security and find Passkeys.
  2. Select the add-passkey action and follow the browser or operating-system prompt.
  3. Give the passkey a recognisable name when requested.
  4. At a later login, choose the passkey option and approve the device prompt.

The Passkeys list shows when each credential was added and last used. Remove a passkey immediately if its device, security key, or password-manager access is lost or transferred.

04 / Desktop connections

Connect your AI app by signing in, and remove it when you are done

Your AI app connects to UX Robot by signing in, the way you connect any app to an account: there is no key to copy or keep safe, and your agent never sees your password. Open Settings → Desktop connections for UX Robot’s address and the steps for each app. Password confirmation is required before this page opens.

  1. Copy UX Robot’s address from Connect your AI app.
  2. Add it to your app. In Claude, in the desktop app or claude.ai, open Customize → Connectors, select + Add, then Add custom connector. Name it UX Robot, paste the address and select Continue twice. Choose Sign in now and, under OAuth client, automatic registration, then select Add. In the Codex app or editor extension, open Settings → MCP servers, select Add server, name it UX Robot, choose Streamable HTTP and paste the address; leave the bearer token and headers empty. Save, then select Restart. Back in the MCP servers list, select Authenticate next to UX Robot. The page also gives the commands for Claude Code and Codex in the terminal; the Claude Code command adds UX Robot for every folder.
  3. Your browser opens UX Robot. Sign in if it asks, check that the app named on the page is the one you are adding, and select Connect. A new account can connect its agent before confirming its email address.
  4. Let your agent use UX Robot’s tools without asking each time, because a run saves its progress and uploads screenshots dozens of times and stops at every approval. In Claude, open Customize → Connectors → UX Robot and set Write/delete tools to Always allow; the tools under read-only tools only read. UX Robot’s tools only change your work in UX Robot and never delete anything.
  5. For each journey or audit, select Get the instruction and Copy the instruction, then paste it into a new chat in your agent. Do not add UX Robot again for a new audit or chat.

The connection appears under Your connections, marked Signed in, as soon as your agent first uses UX Robot. It stays connected while your agent uses it; after 90 days without use, the app asks you to sign in again.

An agent that cannot sign in can use a connection key instead. Under Use a connection key instead, enter a recognisable computer name, such as John MacBook, select Make a connection key, and copy the instruction into the agent. The key is shown only once, UX Robot stores only a one-way hash of it, and it lasts 90 days.

To hand over everything at once, copy the instruction under Hand over all waiting work on the same page. A connected agent that can control a browser then finds every journey, after-pictures task and spot check waiting across your organisations, including runs a schedule started and checks a deploy queued, and works through them one at a time.

The same connection lets a coding agent such as Claude Code or Codex find, fix and verify UX issues; see Coding agents and MCP.

Each connection works across the organisations and audits your UX Robot account can access. The list shows the app or computer name, whether it signed in or uses a key, its status, date added and last use, and a key’s expiry. You can keep up to five active connections, signed in or with a key. Expired keys do not count towards that limit and can be removed. Removed connections disappear from the list rather than remaining as revoked history.

05 / Preferences and deletion

Change appearance or permanently delete the account

Under Settings → Appearance, choose Light, Dark, or System. System follows the device’s current preference.

UX Robot’s public marketing pages and the set-up page a new account sees use the Google tag, covering Google Analytics 4 and Google Ads, and Microsoft Advertising’s tag, without asking first; the public marketing pages also use Microsoft Clarity, which records how visitors use them and masks what is typed into forms. UX Robot keeps its own record of where each visitor came from and the steps they took, linked to the account they create, for 25 months. The Privacy Policy explains what each collects. To prevent the Google and Microsoft tags, block them with your browser settings, an extension, or Google’s Analytics opt-out browser add-on. Doing so does not affect UX Robot itself. None of these runs anywhere else in the workspace or in shared reports, and Clarity never runs on set-up, sign-in or sign-up pages.

Account deletion is available from Billing and, where shown, Profile settings. Before deleting:

  • export anything the organisation is legally or operationally required to keep;
  • tell affected team members and report recipients;
  • understand that the owner subscription is cancelled;
  • understand that organisations, reports, access, and unused units are permanently lost without a refund;
  • understand that every AI app signed in to the account is disconnected and has to sign in again with another account; and
  • enter the password and confirm the destructive action only when you intend it to be final.

If Stripe cancellation fails, UX Robot stops the deletion and displays an error so the subscription is not silently left active. Resolve the billing problem and try again or use the contact form.

Still stuck?

Use the contact form and include the page, action, and exact error message involved. Contact UX Robot.