Change password
Your password, two-factor, where you are signed in, and which API tokens exist.
Security. Password, two-factor, sessions, tokens.| Box / button | What it does |
|---|
| Current password | Your password now. |
|---|
| New password · New password again | Must match. |
|---|
| Change password | Applies. |
|---|
| Sign out everywhere | Top right. Every browser, this one too. Tokens unaffected. |
|---|
Two-factor
| Box / button | What it does |
|---|
| Set up two-factor | Shows a QR code. Scan it with an authenticator app. |
|---|
| Open in your authenticator app | Same, on this device. Or type the key shown. |
|---|
| 6-digit code · Confirm | The app's code. Two-factor is on. |
|---|
| New recovery codes | Needs your password and a code. Old set stops working. Shown once; each works once. |
|---|
| Turn off | Needs your password and a code. Recovery codes destroyed. |
|---|
Where you are signed in
| Box / button | What it does |
|---|
| Where from · Browser · Last active | Each session. this device marks yours. |
|---|
| Sign out · Sign out (this device) | Ends that session. |
|---|
API tokens
A token lets an outside service act as a mailbox or a service on your account, without a password. Treat it like one.
New tenant token. Acts as, name, expiry.| Box / button | What it does |
|---|
| New token | Opens the form. |
|---|
| Acts as | A mailbox address or a service name. Required. |
|---|
| Name (optional) | e.g. Zapier integration. |
|---|
| Expires | in 90 days, in 1 year, never (not recommended). |
|---|
| Create token | Shows it once: Copy this token now. |
|---|
| Name · Belongs to · Created · Last used · Expires | The list. does not expire in amber. |
|---|
| Revoke | Stops it at once. Cannot be restored; issue a new one. |
|---|