# Your account and security

Your account belongs to you, not to a workspace. It holds your name and photo, how you sign in and which notices reach you, and it follows you into every workspace you join.

![The Security page with the Profile panel on the left, showing Password, Sign-in methods and Two-factor authentication](https://thenotemaker.com/help/account-security.webp)

## Open your account

On a computer, choose **Profile** at the bottom of the left rail. A panel opens with **Profile**, **Notifications** and **Security**. On a phone, tap your picture at the top right and choose **Profile**. You can also press Ctrl+K (Cmd+K on a Mac) and type "profile" or "security".

## Profile

-   **Profile photo.** Upload an image, or remove it. It shows next to your name for everyone in your workspaces.
-   **Name.** Change your **Display name** and choose **Save**.
-   **Email.** Your email address is used to sign in and to send you invites. If the address is verified, changing it sends a confirmation link to your current inbox first, and the change takes effect once you follow it. That needs email to be set up on your NoteMaker.

## Notifications

Choose what reaches you in the inbox and by email. Each switch saves the moment you flip it. See [🔔 Notifications and the inbox](https://docs.thenotemaker.com/organise-and-share/notifications-and-the-inbox).

## Password

Under **Security**, open **Password**, enter your **Current password**, a **New password** of at least 8 characters, confirm it and choose **Change password**. If you signed up with Google, Microsoft or GitHub and have no password yet, the same place lets you **Set a password**, so you can also sign in with your email.

## Sign-in methods

Under **Sign-in methods** you can connect Google, Microsoft or GitHub, whichever your administrator has switched on, and then sign in with it as well as, or instead of, your password. **Disconnect** removes one. You always keep at least one way in: the last method cannot be disconnected until you add another.

If you see **Email not verified**, choose **Send verification email** and follow the link in the message. Until the address is verified, signing in with a provider cannot attach itself to your account automatically; connecting the provider from this page works either way.

## Two-factor authentication

Two-factor authentication adds a second step to password sign-in: a 6-digit code from an authenticator app on your phone, such as Google Authenticator, 1Password or Authy.

### Turn it on

1.  Under **Two-factor authentication**, choose **Set up authenticator app**.
2.  Enter your password to confirm, then choose **Continue**.
3.  **Scan the QR code** with your authenticator app.
4.  Enter the 6-digit code the app shows and choose **Turn on**.

NoteMaker then shows your **backup codes**. Each code signs you in once if you lose your phone. They are shown only now, so choose **Copy codes** and keep them somewhere safe.

### Signing in afterwards

After you enter your email and password, NoteMaker asks for the code from your app. If you cannot reach your app, use one of your backup codes instead.

Two-factor applies to signing in with a password. When you sign in with Google, Microsoft or GitHub, that provider's own protection applies.

### Change or turn it off

-   **New backup codes** creates a fresh set. The old codes stop working.
-   **Turn off** removes the second step after you confirm your password.

> [!warning] ⚠️
> Keep your backup codes. Without your authenticator app and without a backup code, you cannot sign in with your password and will need your administrator's help.

> [!info] 💡
> If your administrator requires two-factor for administrators, you will be asked to set it up before you can open the Admin area.

## Appearance

Choose **Light**, **Dark** or **System** (follows your device). On a computer use the sun and moon button in the rail. On a phone it is in the account sheet that opens from your picture. In the Ctrl+K box you can type "dark" or "theme".

## Sign out

On a computer, choose **Sign out** at the bottom of the Profile panel, under the version of NoteMaker you are running. On a phone, it is at the bottom of the account sheet. You can also type "sign out" in the Ctrl+K box.

## Related

-   [🔔 Notifications and the inbox](https://docs.thenotemaker.com/organise-and-share/notifications-and-the-inbox)
-   [🏠 Create your account and workspace](https://docs.thenotemaker.com/get-started/create-your-account-and-workspace)
-   [🛡️ Audit log](https://docs.thenotemaker.com/workspace-settings/audit-log)