Skip to main content
Your account controls sign-in; workspace membership controls what you can access. Open Settings → Profile & sessions for personal security and Settings → Agent access for connected tools.

​
Protect sign-in

Use Profile & sessions to update profile and sign-in details, review devices and sessions, and enable an authenticator. During MFA setup, scan the QR code, enter a current code and store recovery codes securely. Never paste the QR code, secret or recovery codes into support tickets or an agent. Keep automatic time enabled on the authenticator device.

​
Review connected access

Under Settings → Extensions, disconnect browsers you no longer use. Disconnecting blocks future uploads from that browser but does not delete its existing captures. Under Settings → Agent access, review OAuth connections, personal access tokens and connected applications. Grant only captures:read, comments:write or captures:write as needed. Tokens are workspace-scoped, expire after the selected period, and are shown only when created. A personal access token cannot grant the CLI’s OAuth recording-upload capability. Revoke a token or connection when a workflow ends. Workspace roles and folder access are checked separately; a token does not bypass them.

​
Delete the account

Use Delete account only after reviewing workspaces, ownership and billing. The deletion flow requires explicit confirmation and may ask for fresh sign-in or MFA. See account deletion and SAML/Directory Sync.