Your profile and security

My Profile holds your own details and how your sign-in is protected. It applies to you, not to the whole business unit.

📷 Screenshot placeholder — My Profile, the Details tab with the header stats.

My Profile is about you — the person signed in — not the business unit. The header shows your name, your role on this business unit and live counts of its projects, tasks and organisations, with the revenue it has earned. The Details tab holds your identity and contact fields; the Security tab is where you protect the account.

Details

First name and last name — how you appear across the console and to your team.
Username — letters, numbers and underscore, 3 to 30 characters, unique across the platform.
Email — where the platform reaches you about withdrawals, claims and incidents, and the address team invites are matched against. Once set it is fixed and cannot be changed from the console.
Phone — optional.
Profile photo — the camera button uploads an image and saves it with the rest.

Edits are saved from the bar that appears when something changes. A username or email already in use is refused, and the message names which one.

Password

Change password asks for your current password, then a new one of at least 8 characters that differs from it. If you have forgotten it, sign out and use Forgot password? on the sign-in page: the reset link emailed to you is valid for one hour, and using it signs out every session on the account.

Two-factor authentication

📷 Screenshot placeholder — the two-factor set-up dialog showing the QR code and code field.

With two-factor authentication on, signing in takes your password and a six-digit code from an authenticator app.

Click Enable and scan the QR code with your authenticator app, or enter the key it shows by hand.
Type the six-digit code the app shows to confirm.
Save the recovery codes. They are shown once, at the end, and never again.

At sign-in, a correct password is followed by a prompt for the current code. A recovery code works in its place; each one can be used once. Turning two-factor off asks for your password, clears the recovery codes and also switches off withdrawal confirmation. Enabling it again issues a fresh set of codes.

Withdrawal confirmation

Available once two-factor authentication is on. With it enabled, a revenue withdrawal request must carry a current authenticator code (or an unused recovery code) before it is submitted — the withdraw form asks for it.

Linked wallet

Your personal wallet: connect it and sign to prove it is yours, or disconnect it. It is the same wallet that Settings → Connected wallets → Personal shows, and it belongs to you rather than the business unit. It is not a way to sign in to the console — that is email and password. A wallet already linked to another account cannot be linked to yours.

With the toggle on, you receive an email when your account is signed into from a device and address that is not already signed in. Your first-ever sign-in and devices with a live session do not trigger it. When two-factor is on, the alert is sent once the code is accepted.

Active sessions

The list shows every place you are signed in — browser and system, IP address, when the session started and which one is the current one. Sign out on any row ends that session; the device is signed out at its next refresh. The Sign out button in the header ends the session you are using now.

Security posture

A summary of which protections are on for your account: password protection, a linked wallet and two-factor authentication.