Administration — My Profile
Personal account settings for the signed-in user — not organization administration (Users, Groups, Roles, or organization-wide MFA policy).
What it does
The signed-in user can manage their own account:
Edit profile
Update first name, last name, and profile picture URL; email is read-only.
Email verification
See verification status and resend the verification email.
MFA enrollment
Enroll with Google or Microsoft Authenticator (TOTP), view status, and regenerate recovery codes.
Active sessions
Review signed-in devices; revoke one session, sign out other devices, or sign out everywhere.
Activity & insights
Charts for sign-in trends, security posture, sessions, and API-key activity, plus a recent sign-in list.
Security recommendations
Personal recommendations, such as verifying email, enabling MFA, and regenerating recovery codes.
How to access
My Profile is categorized as Account in navigation and is opened from the top-bar user account menu, not from the Administration sidebar. Any authenticated organization member can open the page.
Prerequisites & permissions
Password changes are not performed on this page — use your identity provider or contact an organization administrator. Notification preferences are managed separately.
Sections
Shows the user's avatar, full name, email, organization role, organization name, email verification status, and MFA status.
Operational alerts appear when email is unverified, MFA is disabled, or recovery codes are running low.
When email is not verified, the page explains that the user can use the sign-up verification link or complete email verification through MFA enrollment. A note links to Notification preferences for alert settings — not API key management.
Enrollment supports Google Authenticator and Microsoft Authenticator (TOTP): QR code or manual setup key, verification code, then one-time recovery codes. When MFA is enabled, users can regenerate recovery codes with their current MFA code. If the organization enforces MFA, an information banner explains that administrators manage the policy. When MFA is enabled without organization enforcement, users may see guidance to contact an administrator to disable MFA.
Sign out other devices keeps the current browser signed in. Sign out everywhere revokes all sessions, including the current one, and returns the user to the sign-in page. The current session shows a This device chip instead of a Revoke button.