> ## Documentation Index
> Fetch the complete documentation index at: https://docs.synheart.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Account & security

> Manage your Synheart Platform profile, password, two-factor authentication, and pending invitations

The **Profile** page manages your personal account: your display name, password and two-factor authentication, and any organization invitations addressed to you. It's separate from [organization settings](/platform/organizations-and-tenants#organization-settings), which configure the company account.

Open it from the sidebar **Admin** section: **Profile**. The page heading is **Account settings** with the subtitle *"Manage your profile, security preferences, and organization invitations."*

Two summary cards show your account **Status** (Active) and **Member since** year. The page has two tabs: **Account** and **Invitations**.

***

## Profile

The **Profile** section shows your sign-in identity. Your **Email** is read-only; sign-in email cannot be changed from this page. Your **Display name** controls how your name appears across the dashboard; click **Edit**, make your change, then **Save changes**.

If your email is unverified you'll see *"Your email is not verified yet. Check your inbox for the verification link."*

***

## Security

The **Security** section manages password sign-in and two-factor authentication (TOTP).

### Set a password

If you signed up with Google or GitHub and have no password yet, you can add one to enable email sign-in. Enter a **New password (min. 8 characters)**, **Confirm password**, and click **Save password**. On success: *"Password saved. You can sign in with your email and this password."*

<Note>
  The Profile page lets OAuth-only accounts **set** a password. There is no in-page "change password" form once a password exists. Use the password reset flow if you need to change an existing password.
</Note>

### Two-factor authentication (TOTP)

Two-factor authentication adds an authenticator-app code at sign-in. The card shows an **On**/**Off** badge.

<Steps>
  <Step title="Enable">
    Click **Enable** to open **Set up authenticator**. Scan the QR code with an authenticator app (Google Authenticator, Authy, etc.), or enter the **Secret key (manual entry)** shown.
  </Step>

  <Step title="Verify">
    Enter the 6-digit **Verification code** from your app and click **Confirm**.
  </Step>

  <Step title="Save recovery codes">
    On the **Save your recovery codes** screen, store the codes somewhere safe, as they won't be shown again. Use **Copy all**, **Download .txt**, or **Print / save PDF**, then confirm *"I have saved my recovery codes in a secure place"* and click **Continue**.
  </Step>
</Steps>

<Warning>
  Recovery codes are shown **once**. Save them before continuing; they're your fallback if you lose access to your authenticator app.
</Warning>

To turn MFA off, click **Disable**, enter your account **Password** and a current **Authenticator code**, and confirm. *"This will sign you out everywhere."*

<Note>
  You must have a password set before you can disable MFA (the **Disable** button is disabled otherwise, with the hint *"Set a password first to disable MFA"*).
</Note>

***

## Invitations

The **Invitations** tab lists organization invitations addressed to your account, with columns for the organization **Title**, who **Invited** you, the **Role**, **Members**, **Invite date**, **Projects**, and an **Action**.

* **Accept**: joins the organization.
* **Decline**: *"Are you sure you want to decline this invitation? This action cannot be undone."*

When you have none: *"You have no pending invitations."* For the full invitation flow across scopes, see [Members & roles → Accept an invitation](/platform/members-and-roles#accept-an-invitation).

***

## Next

<CardGroup cols={2}>
  <Card title="Members & roles" icon="users" href="/platform/members-and-roles">
    Understand roles and how invitations work across orgs, tenants, and projects.
  </Card>

  <Card title="Organizations & tenants" icon="building" href="/platform/organizations-and-tenants">
    Manage the workspaces you belong to.
  </Card>

  <Card title="Developer portal" icon="user-gear" href="/platform/developer-portal">
    Sign in, register apps, and request access for your integration.
  </Card>
</CardGroup>