Your Account

EN

What it is for

Your name, your email address, your password, and the sessions currently signed in as you. Every change on this page asks for your current password first, and that is deliberate rather than cautious: a signed-in browser is not proof of who is using it, and somebody who reached an unattended screen should not be able to change the address that recovers the account.

EN

How to use it

1. Change one thing at a time and confirm it with your current password. The page states what will happen before it happens.
2. Changing your email address does not take effect until you confirm it from the new address. Until then the old one still recovers the account.
3. Use sign out everywhere when you have used a shared or borrowed machine. It ends every session but the one you are in.
4. Review the recent activity list occasionally. It is the record of what was done as you, which is the only way to notice what you did not do.

EN

Reading the result

The activity list records events, not intentions: it shows that a password was changed and when, not who was holding the keyboard. An entry you do not recognise is worth acting on immediately - change the password, then sign out everywhere - because the record is evidence and not an alarm.

EN

What it cannot tell you

This page secures the account, not the work: it cannot recover an audit you deleted or a project you removed. It also cannot help if you lose both your password and access to your email address, which is the case two-factor recovery codes exist to prevent.

EN

What it keeps

Your account details, and a bounded record of security events - sign-ins, password changes, address changes. Session records are removed when the sessions end. The activity list is trimmed on a schedule, because a security log nobody can read to the end is a log nobody reads.