Your settings

Where your settings are

Your own settings are in the user menu: choose the button with your name at the right of the top bar, then one of the pages under User settings - Profile, Password, Two-factor auth, Passkeys, Devices and Connected agents. Billing Only users do not see Connected agents, because a coding agent cannot read logs for them.

Every user can change these settings, including a Read Only user. Account-wide rules - requiring two-factor authentication and ending sessions - are set by Account Admins in Account settings.

Profile

User settings > Profile holds your first and last name, your email address, and two settings that change how every page shows dates and times:

• Timezone - every date and time is shown in this timezone. Leave it empty to use the account's Default timezone.
• Date format - Day first, Month first or ISO 8601. Leave it empty to use the account's Default date format.

An Account Admin sets both defaults in Account > Settings.

Password

To change your password, open User settings > Password, enter your current password and the new one twice.

Changing your password logs you out of every other browser you are logged in from. The same happens when you reset your password from the login page, and when an Account Admin sets a new password for you.

An Account Admin can also require you to change your password. You are then asked for a new one at your next login, before you can use SaneLog.

Two-factor authentication

With two-factor authentication on, every login asks for a six-digit code from an authenticator app after your password. To turn it on:

1. Open User settings > Two-factor auth and confirm your password.
2. Choose Enable 2FA.
3. Scan the QR code with an authenticator app, such as Google Authenticator or 1Password, and enter the code the app shows.
4. Choose View recovery codes and store the codes somewhere safe, such as a password manager.

When your account requires two-factor authentication, SaneLog opens the same setup before any other page. There, the recovery codes are shown as soon as the code is confirmed, above Continue to SaneLog.

Recovery codes

Each recovery code can be used once, in place of a code from the app: at the code step, choose log in using a recovery code. If you run low or lose them, choose Regenerate codes on the Two-factor auth page. The old codes then stop working.

An Account Admin cannot reset another user's two-factor authentication. If you have lost both your authenticator app and your recovery codes, write to support@sanelog.com.

Remembering a browser

At the code step of a login, the box Remember this device for 30 days (or however many days it shows) is ticked by default. If you leave it ticked, that browser is not asked for a code again until those days have passed. These browsers are listed under Devices, where you can stop trusting them.

Turning it off

Disable 2FA turns two-factor authentication off. It asks for a current code from your authenticator app, and removes your recovery codes and trusted browsers. It is not offered when your account requires two-factor authentication.

Passkeys

A passkey lets you log in with your fingerprint, face, device PIN or a security key instead of your password. To add one, open User settings > Passkeys, confirm your password and choose Add passkey.

A passkey is kept by the device, security key or password manager that created it. A passkey kept by a password manager, or by Apple or Google, can be available on your other devices too. A passkey kept by a single device or security key works only there, so add one on each device you use. A passkey only works on the site it was created for, so it cannot be used on a fake login page.

A passkey does not count as two-factor authentication. When your account requires two-factor authentication, you still need to set up an authenticator app.

Sessions

An Account Admin can set a Session timeout in the account settings. If you are idle for that long, you are logged out. Activity in any SaneLog tab in the same browser counts.

Ten minutes before the timeout, a Still there? dialog shows the time left. Choose Stay logged in to carry on, or Log out to end the session now.

An Account Admin can also turn on End sessions when the browser closes. You then log in again every time you open the browser.

Every browser you are logged in from is listed under Devices.

Devices

User settings > Devices shows three lists. Each one shows the browser, its IP address and the location of that address.

Logins

Logins lists every browser that is still logged in as you, whether it is open right now or closed. A browser shows as Open now while it has a SaneLog tab open. A closed browser stays logged in until the login expires or you log it out here. Log out ends that login straight away. The browser you are using is marked This browser.

Remembered browsers

Remembered browsers lists every browser you have logged in from, whether or not you are logged in from it now. SaneLog recognises each browser by a cookie.

When you log in from a browser that is not in this list, you receive a new device email with the time, browser, IP address and location. That happens for a new computer or phone, a browser whose cookies were cleared, or someone else using your password. Your very first login is recorded without an email.

• Forget removes a browser from the list but does not log it out. The next login from that browser sends a new device email, and the browser is then remembered again.
• Browsers are remembered for each user separately. If two users log in from the same browser, each receives one new device email, and forgetting the browser for one of them does not affect the other.

If a new device email reports a login that was not you, reset your password, then log out every browser you do not recognise from this page.

Trusted for two-factor authentication

Trusted for two-factor authentication lists the browsers where you left the box to remember the device ticked at the code step. These browsers are not asked for a two-factor code until the date shown.

Stop trusting does not log the browser out, but its next login asks for a code. Trust is kept for each user separately, so stopping trust for one user does not affect other users of the same browser.

Connected agents

User settings > Connected agents lists the coding agents you have approved to read the account's logs through the MCP server. Removing one stops that agent on its next request. The same list is on the Agents page. See Managing connected agents.