Account settings
Account settings manage the user’s own identity, authentication, preferences, and integrations that are personal rather than organization-wide.
Profile
Review display name, email, timezone, and optional ORCID iD. Accurate timezone settings are important for schedules, alerts, signatures, and audit interpretation.
Password and authentication
Use a unique password and enable two-factor authentication. Save recovery codes securely and never share them.
Sessions
Review active sessions and revoke devices that are unfamiliar, lost, shared, or no longer used.
ORCID
Add an ORCID iD when researcher attribution is appropriate. ORCID is optional and does not by itself verify identity or authorship.
API keys
Users with the required organization permission may create or manage API credentials from the relevant organization or account area. Use one key per integration, store it in a secret manager, and revoke unused keys.
Security-sensitive changes
Email, password, two-factor, and session changes can affect account access. Verify the result after each change and follow incident procedure when an unexpected change appears.