---
title: Account
description: Managing your login, password, two-factor authentication, and connected accounts.
---

Account and security settings apply to you personally, across every workspace you belong to — separate from a workspace's own settings, like [member roles](/docs/members/) and billing.

## Signing in

Futrou supports signing in with an email and password, or with **Google**, **Microsoft**, **GitHub**, or **GitLab**.

### Workspace SSO auto-join

Separately, a workspace **Owner** or **Administrator** can configure **auto-join** in Workspace Settings → SSO: anyone who signs up with an email address on a specified domain is automatically added to the workspace. This is meant for company domains you control — never set it to a public domain like `gmail.com`, since that would let anyone with a matching address join.

## Password

Change your password from **Account Settings → Password**, using your current password to confirm. Passwords must be at least 10 characters. If you're locked out, use **Forgot your password?** on the login page to reset it by email.

## Email

Your account email is used for sign-in, notifications, and 2FA codes if you use email-based 2FA. Change it from **Account Settings → Email**; you'll need to confirm the new address before it takes effect.

## Two-factor authentication (2FA)

2FA adds a second step to signing in, on top of your password. Set it up from **Account Settings → 2FA**, using your current password to confirm the change.

![Two-factor authentication settings with None, OTP Email, and OTP App options](/img/docs/v2/settings-2fa.png)

Two methods are available:

- **OTP Email** — a one-time code sent to your account email at sign-in.
- **OTP App** — a time-based one-time code from an authenticator app (such as Google Authenticator or Authy), set up by scanning a QR code.

## Devices

**Account Settings → Devices** lists every active session — browser, operating system, and when it last signed in — with the device you're currently using marked. Revoke a single device, or sign out of every other device at once, if you see something you don't recognize.