Account and security

Your account security lives in Dashboard → Security. It's separate from your workspace settings: this is about you and your sign-in, wherever you're a member.

#Password

Change your password any time under Security. Changing it signs out your other sessions and disconnects your connected apps, a safety measure, but it means a connected agent will need to be re-authorized afterward.

If you've forgotten your password, use Forgot password on the sign-in page: you'll get a reset link by email. For your safety, we never confirm whether an address has an account: the same message shows either way. Note that the reset link works on its own, without your second factor, so your email inbox is the real key to your account. Keep it well secured.

#Two-factor authentication

Turn on two-factor authentication (2FA) to require a one-time email code in addition to your password. With it on, signing in (and sensitive changes like changing your password) asks for a code sent to your email, so a leaked password alone isn't enough to get in. Turning it on signs out your other devices by default.

#Active sessions

Security lists every device currently signed in to your account, with where and when. If something looks wrong (an old laptop, an unfamiliar location), sign it out from here. Sign out other devices ends every session except the one you're using, a fast way to lock things down after a scare. Sessions also expire on their own (after 30 days of inactivity, and 90 days at the outside), so you'll re-sign-in periodically even on a device you use daily.

#Connected apps

Every AI agent or client you've connected appears here as a connected app, with the workspace it was authorized for. Revoke any of them and its access ends immediately. Nothing it already built is affected. You're only cutting off future access.

Two things to know: the name shown isn't verified (any client can call itself whatever it likes, "Tessryx Official" included), so judge an entry by its workspace and when it was last used, not its name. And a connection you never use expires on its own after about 90 days, so old grants don't linger forever.

Review this list now and then, and revoke anything you don't recognize or no longer use.

#A quick checklist

• Use a strong, unique password.
• Turn on two-factor authentication.
• Revoke connected apps you're done with.
• Sign out sessions you don't recognize.