Profile
The Profile page lets you customize your personal preferences including theme, accent color, timezone, and password, and manage two-factor authentication (MFA). These settings are per-user and do not affect other team members.
Fields & columns
| Name | Description |
|---|---|
Theme | Light or dark mode preference |
Accent Color | UI accent color for personalization |
Timezone | Your preferred timezone for displaying timestamps |
How to
Change your password
- Navigate to Profile from the user menu.
- Scroll to the Security section.
- Enter your current password, then your new password twice (it must be at least 12 characters).
- Click Change Password. You stay signed in on this device.
Turn on two-factor authentication (MFA)
- In the Security section, under Two-Factor Authentication, click Set up MFA.
- Scan the QR code with an authenticator app (Google Authenticator, 1Password, Authy), or type the shown key in manually if you cannot scan.
- Enter the 6-digit code from the app and click Confirm & Enable.
- Save the recovery codes that appear — copy them or download the .txt file. They are shown only once.
Turn off two-factor authentication
- In the Security section, under Two-Factor Authentication, click Disable MFA.
- Enter a current code from your authenticator app, or one of your recovery codes.
- Click Confirm Disable.
Gotchas
- Changing your password signs you out of all your OTHER devices and active sessions — only the device you change it on stays logged in. This is intentional: a password change rotates your credentials, so any other (or stolen) session is invalidated.
- Password change is not available for SSO accounts. If you sign in through single sign-on, your password lives with your identity provider — change it there.
- The change-password form lists every requirement under the new-password field and turns each one green as the typed value meets it; Confirm new password turns green only when it matches exactly. Change Password stays disabled until everything is green. The server enforces the same list.
- Once MFA is on, signing in takes two steps: your password, then the code from your authenticator app. "Use a recovery code" on that second step accepts one of your recovery codes instead; each works once. The second step must be finished within 5 minutes — after that, or after reloading the page, start again with your password.
- If your deployment requires MFA and you have not set it up, the sign-in page walks you through setup after your password (QR code or manual key, then a confirming code) and shows your recovery codes before letting you in. Save them before pressing Done.
- Recovery codes are shown only ONCE, right after you enable MFA. Save them somewhere safe — they are the only way back in if you lose your authenticator device. They are never displayed again.
- Disabling MFA requires your second factor (a current authenticator code or a recovery code), NOT your password. This stops a stolen session from silently turning MFA off.
- MFA is not available for SSO accounts — your identity provider handles second factors for those logins. It may also be disabled, or required, by a deployment-wide policy set by an administrator.
- If you lose your device and have no recovery codes left, ask an administrator to reset your MFA. The owner account can use the break-glass recovery path documented in Getting Started.
API calls (7)
| Method | Path | Description |
|---|---|---|
| GET | /api/profile | Get current user profile and preferences |
| PUT | /api/profile/preferences | Update display preferences (theme, accent, timezone) |
| PUT | /api/profile/password | Change your password (local accounts only) |
| POST | /api/profile/mfa/setup | Begin MFA enrollment; returns the otpauth URI and secret for the QR code |
| POST | /api/profile/mfa/enable | Confirm a code and enable MFA; returns one-time recovery codes |
| DELETE | /api/profile/mfa | Disable MFA (requires a current code or a recovery code) |
| GET | /api/system/timezones | List available timezone options |