Account and security

Open the user menu and select Settings.

• On Profile, update your name or email address and select Save. A changed email may require verification before full application access resumes.
• On Security, enter the current password, a new long and unique password, and confirmation, then select Save.
• Security settings may require recent password confirmation before they open.

Use an individual account rather than sharing credentials. Organisation access can be granted through Team without sharing the owner login.

1. Open Settings → Security.
2. Under Two-factor authentication, select Enable 2FA.
3. Scan the QR code with a TOTP-compatible authenticator app, or enter the manual setup key.
4. Enter the six-digit code from the authenticator and confirm setup.
5. Store the recovery codes in a secure location separate from the device used for authentication.

At sign-in, enter the current authenticator code when prompted. If the authenticator is unavailable, use one unused recovery code. Regenerating recovery codes invalidates the old set.

Passkeys use a supported browser, device, security key, or password manager to authenticate without typing the account password.

1. Open Settings → Security and find Passkeys.
2. Select the add-passkey action and follow the browser or operating-system prompt.
3. Give the passkey a recognisable name when requested.
4. At a later login, choose the passkey option and approve the device prompt.

The Passkeys list shows when each credential was added and last used. Remove a passkey immediately if its device, security key, or password-manager access is lost or transferred.

Under Settings → Appearance, choose Light, Dark, or System. System follows the device’s current preference.

On public marketing pages, use Cookie settings in the footer to accept or reject optional Google Analytics. The choice is remembered for six months and can be changed at any time. Website analytics is not used inside authenticated workspaces or shared reports.

Account deletion is available from Billing and, where shown, Profile settings. Before deleting:

• export anything the organisation is legally or operationally required to keep;
• tell affected team members and report recipients;
• understand that the owner subscription is cancelled;
• understand that organisations, reports, access, and unused units are permanently lost without a refund; and
• enter the password and confirm the destructive action only when you intend it to be final.

If Stripe cancellation fails, UX Robot stops the deletion and displays an error so the subscription is not silently left active. Resolve the billing problem and try again or use the contact form.