# Account and security

Profile, e-mail, password, two-step verification, backup codes, signing out and deleting your account.

Source: https://fivedash.fivex.gg/docs/en/dashboard/account-and-security

Your account is personal and applies to every organization you belong to. Here you change how you appear to your team, change your e-mail and password, turn on two-step verification and, if needed, delete the account. Since the account gives access to real cities' bots, stores and money, it's worth turning on the authenticator app.

## Before you start

* Everything lives in the settings window, **Account** group: **Settings → Profile** and **Settings → Security**. Or through the account menu (your picture, at the bottom of the module bar) → **Profile** / **Security**.
* Accounts created with **Continue with Discord** have no password. Several actions ask for the password to confirm it's you, so create one in **Security → Create password**.

## Profile

In **Settings → Profile** (how you appear to your team in the dashboard):

| Group           | Field              | What it does                                                                                      | Rules                                                      |
| --------------- | ------------------ | ------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- |
| **Account**     | **Photo**          | Shown in the dashboard and in your team's activity. **Change profile photo** or **Use initials**. | PNG, JPG or WebP                                           |
| **Account**     | **Name**           | How your team sees you                                                                            | 2 to 64 characters                                         |
| **Account**     | **Discord**        | Optional. Shown on your profile.                                                                  | 2 to 32 characters: lowercase letters, numbers, `_` or `.` |
| **Language**    | **Language**       | The dashboard's language for you. It doesn't change what your team sees. Applies right away.      | Português (Brasil) or English                              |
| **Session**     | **Sign out**       | Ends the session in this browser. **Sign out** button.                                            |                                                            |
| **Danger zone** | **Delete account** | Schedules your account's deletion (see below)                                                     |                                                            |

Changed your photo, name or Discord? Use **Save** in the **You have unsaved changes** bar, or **Discard**.

## Security

In **Settings → Security** (your account's e-mail, password and two-step verification):

| Group                     | Item                                     | Button                                     | What it does                                                                        |
| ------------------------- | ---------------------------------------- | ------------------------------------------ | ----------------------------------------------------------------------------------- |
| **Sign-in details**       | **E-mail**                               | **Change e-mail**                          | Changes your sign-in e-mail                                                         |
| **Sign-in details**       | **Password**                             | **Change password** or **Create password** | Changes the password, or creates one for accounts that sign in with Discord         |
| **Two-step verification** | **Authenticator app** (**On** / **Off**) | **Turn on** or **Turn off**                | Asks for a code from your app after the password when signing in                    |
| **Two-step verification** | **Backup codes**                         | **Generate new codes**                     | Use them to sign in if you lose your phone. Generating new ones voids the old ones. |

### Change your e-mail

### Start the change

Click **Change e-mail**. Confirm with your password (and the app code, if two-step verification is on).

### Enter the new e-mail

In **New e-mail**, type the new address. We send a code to it.

### Confirm the code

In **Confirm your new e-mail**, enter the 6-digit code (valid for 5 minutes) and click **Confirm**.

### Done

**E-mail changed** shows: you now sign in with the new e-mail. We let your previous address know.

> The change only applies once you confirm the code. If the new e-mail already belongs to another account, you see **This e-mail is already used by another account.**

### Change your password

### Open the change

Click **Change password**.

### Fill it in

Enter the **Current password**, the **New password** and **Confirm new password**. If two-step verification is on, also enter the app code.

### Choose whether to sign out other devices

Turn on **Sign out of other devices** if you want: anyone using your old password loses access right away.

### Save

Click **Save new password**. **Password changed** shows and we send a notice to your e-mail.

| Message                                             | Why                                                           |
| --------------------------------------------------- | ------------------------------------------------------------- |
| **Wrong current password.**                         | The current password doesn't match                            |
| **Pick a password different from the current one.** | The new one is the same as the current one                    |
| **Choose a stronger password.**                     | The new password didn't reach **Good** (minimum 8 characters) |

### Turn on two-step verification

### Confirm with your password

Under **Authenticator app**, click **Turn on**. In **Turn on two-step verification**, enter your password.

### Connect the app

In **Connect your authenticator app**, scan the QR code with Google Authenticator, Authy, 1Password or any app you like. **Can't scan it?** shows the key to type in (**Copy key**) or **Open in authenticator app** on your phone.

### Enter the app's code

In **6-digit code from the app**, enter the code shown in the app.

### Save your backup codes

In **Save your backup codes**, use **Copy** or **Download .txt** (file `fivedash-backup-codes.txt`). Each works once, and they won't be shown again. Click **Saved them, finish**.

**Two-step verification turned on** shows. Next time you sign in, FiveDash will ask for the app's code. We send a notice to your e-mail.

| Action                 | How to confirm        | What happens                                                                                                                        |
| ---------------------- | --------------------- | ----------------------------------------------------------------------------------------------------------------------------------- |
| **Generate new codes** | Password and app code | Your previous codes stop working as soon as the new ones are generated                                                              |
| **Turn off**           | Password and app code | Your account goes back to asking only for e-mail and password, and your backup codes stop working. We send a notice to your e-mail. |

> After too many wrong password or code attempts, security actions are locked for 15 minutes: **Too many attempts. Wait 15 minutes and try again.**

## Sessions

| How to sign out                                                              | What it ends                                                          |
| ---------------------------------------------------------------------------- | --------------------------------------------------------------------- |
| **Settings → Profile → Session → Sign out** (or account menu → **Sign out**) | The session in this browser                                           |
| **Sign out of other devices**, when changing the password                    | Every other session opened with the old password                      |
| Deleting the account                                                         | Sessions on every device                                              |
| **Remember this device for 30 days**, at sign-in                             | Not a session: it only skips the app code in this browser for 30 days |

The dashboard doesn't show a list of open sessions.

## Delete your account

### Open the danger zone

Go to **Settings → Profile → Danger zone → Delete account**.

### Read what goes away

In **Delete your account**: your profile, photo and Discord; your access to other people's organizations; and signing in with e-mail, password and two-step verification.

### Decide what to do with your organizations

Under **Organizations you own**, pick for each one **Hand over** (choose the **New owner** from the team) or **Delete**. With nobody else on the team, it's deleted, along with its servers and bots.

### Confirm

In **Confirm the deletion**, type `delete my account`, your password and the app code (or the code we e-mail you).

### Deletion scheduled

**Deletion scheduled** shows: we sign you out on every device and e-mail you the details.

| Rule                              | Detail                                                                                                                                           |
| --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------ |
| Timeframe                         | The account is kept for 14 days and then erased for good                                                                                         |
| Changing your mind                | Sign in again before the date: the deletion is canceled and everything stays as it is                                                            |
| Plan of organizations handed over | The receiver keeps the plan until the paid date, but the Pix Automático in your name is canceled and the next charge uses the receiver's details |
| Plan of deleted organizations     | The plan is canceled, with no refund of what was already paid                                                                                    |

## FAQ

**I lost the phone with my authenticator app.** Sign in with a backup code (**Use a backup code** on the sign-in screen). Then turn the app off and on again in **Security**.

**I sign in with Discord. Why am I asked for a password?** The password confirms it's you before changing your e-mail, turning on two-step verification, transferring or deleting something. Create one in **Security → Create password**.

**I got a "password changed" e-mail and it wasn't me.** Reset the password with **Forgot your password?**, change it and turn on the authenticator app. If you can't sign in, contact support.

## Next steps

[Create an account](https://fivedash.fivex.gg/docs/en/getting-started/create-account)

Sign-in, password reset and the second step.

[Language](https://fivedash.fivex.gg/docs/en/dashboard/language)

Change the dashboard's language.

[Invites and ownership](https://fivedash.fivex.gg/docs/en/dashboard/invites-and-ownership)

Transfer before you leave.

[Troubleshooting](https://fivedash.fivex.gg/docs/en/help/troubleshooting)

Locked accounts and codes that don't arrive.
