Profile, preferences, and security

General profile

Open Settings → General to update your profile photo, full name, and username. Usernames accept lowercase letters and numbers and must be 2–20 characters. The page displays your sign-in email as read-only; it cannot be changed from Settings. Changing a display name or username does not change connected sender addresses, workspace identity, or billing contacts.

Preferences and timezone

Open Settings → Preferences to manage appearance, a timezone selection, and email-notification selections. The timezone and notification selections currently save to the signed-in user’s browser storage. They may not follow you to another browser, browser profile, or device, and they should not be treated as confirmation that a server-side schedule or notification subscription changed.

Set operational timezones in the module that owns the schedule. For example, campaigns and webinar sessions have their own scheduling context. Document whether a customer-facing time follows a campaign, webinar, workflow, contact, or provider timezone, and verify it in that module before launch. See workspace and team setup and feature availability.

Passkeys

Where the Passkey settings card is available, choose Add passkey and complete the prompt on a device or password manager you control. Spacebrain creates the displayed name automatically from the detected device or platform; the current screen does not ask for a custom label or provide a rename action. The list shows when each passkey was added and, when available, last used.

Add more than one passkey where your authentication policy allows, and maintain a separate working recovery path so the loss of one device does not lock out the account.

Before deleting a passkey, confirm another sign-in and recovery method works. Biometrics generally unlock a device-held credential; Spacebrain does not receive your fingerprint or face scan.

Password and recovery

Use the sign-in page’s password-reset path and complete email verification. Do not share reset links or one-time codes. If a reset email is missing, check the entered address, spam and quarantine, organization mail rules, and system status before requesting repeatedly.

Session safety

• Use a unique account for each person.
• Sign out on shared or unmanaged devices.
• Do not approve provider OAuth prompts initiated by someone else.
• Review unexpected invitations, login messages, or reset requests as a security event.
• Report suspected account compromise immediately and rotate affected provider credentials.

Access changed but the UI did not

Save work, refresh, or sign out and back in after a role change. Confirm the active workspace. Access can also depend on agency tier, plan, or staged feature availability.

If a read-only sign-in email is wrong or you cannot complete recovery, gather the workspace name and exact error, then follow contact support.