Your account

Everything personal lives under Settings, reached from your profile at the bottom of the sidebar.

Profile

Your name, avatar, email, and timezone. Timezone matters more than it looks: it drives when "tomorrow, 9am" snoozes wake up and how times are displayed to you. Leave it blank to follow the agency default.

Password

Change your password (current password required). If your workspace uses Google sign-in only, you may not have a password at all; see authentication settings for what's enabled.

Appearance

Light, Dark, or System.

Two-factor authentication

Add a TOTP app (Google Authenticator, 1Password, Authy, and friends) as a second factor:

1. Press Enable 2FA.
2. Scan the QR code, or enter the setup key manually.
3. Confirm with a 6-digit code from the app.

Once enabled, store your recovery codes somewhere safe; they're the way back in if you lose the device. Disable 2FA turns it off again.

Connected apps

Every app you've authorised via OAuth, including AI assistants connected over MCP, is listed here with its granted scopes and last-used time. Revoke cuts an app's access immediately; nothing it already created is affected. This page is worth an occasional audit.

API tokens

Personal access tokens for the REST API: name one, tick the scopes it needs, and copy the value when it's shown (that's the only time). Tokens expire after six months, and each is listed with its scopes, creation date, and expiry so stale ones are easy to spot and Revoke.