# Your settings > Your profile, password, two-factor authentication, passkeys, sessions, devices and connected agents. ## Where your settings are Your own settings are in the user menu: choose the button with your name at the right of the top bar, then one of the pages under **User settings** - **Profile**, **Password**, **Two-factor auth**, **Passkeys**, **Devices** and **Connected agents**. Billing Only users do not see **Connected agents**, because a coding agent cannot read logs for them. Every user can change these settings, including a Read Only user. Account-wide rules - requiring two-factor authentication and ending sessions - are set by Account Admins in [Account settings](https://app.sanelog.com/docs/account.md#account-settings). ## Profile **User settings > Profile** holds your first and last name, your email address, and two settings that change how every page shows dates and times: - **Timezone** - every date and time is shown in this timezone. Leave it empty to use the account's **Default timezone**. - **Date format** - **Day first**, **Month first** or **ISO 8601**. Leave it empty to use the account's **Default date format**. An Account Admin sets both defaults in **Account > Settings**. ## Password To change your password, open **User settings > Password**, enter your current password and the new one twice. Changing your password logs you out of every other browser you are logged in from. The same happens when you reset your password from the login page, and when an Account Admin sets a new password for you. An Account Admin can also require you to change your password. You are then asked for a new one at your next login, before you can use SaneLog. ## Two-factor authentication With two-factor authentication on, every login asks for a six-digit code from an authenticator app after your password. To turn it on: 1. Open **User settings > Two-factor auth** and confirm your password. 2. Choose **Enable 2FA**. 3. Scan the QR code with an authenticator app, such as Google Authenticator or 1Password, and enter the code the app shows. 4. Choose **View recovery codes** and store the codes somewhere safe, such as a password manager. When your account requires two-factor authentication, SaneLog opens the same setup before any other page. There, the recovery codes are shown as soon as the code is confirmed, above **Continue to SaneLog**. ### Recovery codes Each recovery code can be used once, in place of a code from the app: at the code step, choose **log in using a recovery code**. If you run low or lose them, choose **Regenerate codes** on the **Two-factor auth** page. The old codes then stop working. An Account Admin cannot reset another user's two-factor authentication. If you have lost both your authenticator app and your recovery codes, write to [support@sanelog.com](mailto:support@sanelog.com). ### Remembering a browser At the code step of a login, the box **Remember this device for 30 days** (or however many days it shows) is ticked by default. If you leave it ticked, that browser is not asked for a code again until those days have passed. These browsers are listed under [Devices](https://app.sanelog.com/docs/your-settings.md#devices), where you can stop trusting them. ### Turning it off **Disable 2FA** turns two-factor authentication off. It asks for a current code from your authenticator app, and removes your recovery codes and trusted browsers. It is not offered when your account requires two-factor authentication. ## Passkeys A passkey lets you log in with your fingerprint, face, device PIN or a security key instead of your password. To add one, open **User settings > Passkeys**, confirm your password and choose **Add passkey**. A passkey is kept by the device, security key or password manager that created it. A passkey kept by a password manager, or by Apple or Google, can be available on your other devices too. A passkey kept by a single device or security key works only there, so add one on each device you use. A passkey only works on the site it was created for, so it cannot be used on a fake login page. A passkey does not count as two-factor authentication. When your account requires two-factor authentication, you still need to set up an authenticator app. ## Sessions An Account Admin can set a **Session timeout** in the account settings. If you are idle for that long, you are logged out. Activity in any SaneLog tab in the same browser counts. Ten minutes before the timeout, a **Still there?** dialog shows the time left. Choose **Stay logged in** to carry on, or **Log out** to end the session now. An Account Admin can also turn on **End sessions when the browser closes**. You then log in again every time you open the browser. Every browser you are logged in from is listed under [Devices](https://app.sanelog.com/docs/your-settings.md#devices). ## Devices **User settings > Devices** shows three lists. Each one shows the browser, its IP address and the location of that address. ### Logins **Logins** lists every browser that is still logged in as you, whether it is open right now or closed. A browser shows as **Open now** while it has a SaneLog tab open. A closed browser stays logged in until the login expires or you log it out here. **Log out** ends that login straight away. The browser you are using is marked **This browser**. ### Remembered browsers **Remembered browsers** lists every browser you have logged in from, whether or not you are logged in from it now. SaneLog recognises each browser by a cookie. When you log in from a browser that is not in this list, you receive a new device email with the time, browser, IP address and location. That happens for a new computer or phone, a browser whose cookies were cleared, or someone else using your password. Your very first login is recorded without an email. - **Forget** removes a browser from the list but does not log it out. The next login from that browser sends a new device email, and the browser is then remembered again. - Browsers are remembered for each user separately. If two users log in from the same browser, each receives one new device email, and forgetting the browser for one of them does not affect the other. If a new device email reports a login that was not you, reset your password, then log out every browser you do not recognise from this page. ### Trusted for two-factor authentication **Trusted for two-factor authentication** lists the browsers where you left the box to remember the device ticked at the code step. These browsers are not asked for a two-factor code until the date shown. **Stop trusting** does not log the browser out, but its next login asks for a code. Trust is kept for each user separately, so stopping trust for one user does not affect other users of the same browser. ## Connected agents **User settings > Connected agents** lists the coding agents you have approved to read the account's logs through the MCP server. Removing one stops that agent on its next request. The same list is on the **Agents** page. See [Managing connected agents](https://app.sanelog.com/docs/mcp.md#managing-connected-agents).