Using openbranchhq
Account and security
Manage your name, email, photo, sign-in methods, password, two-factor authentication and sessions.
- Where
- User menu → Account
- How to enable
- Always on.
Your account belongs to you, not to a workspace. You use the same login for every organization you're a member of, so the account page sits outside any single organization.
How it works
- Profile and photo. You can change your name at any time. To change your email, confirm it with the link sent to your current address. Your photo can be a PNG or JPG of up to 1 MB, and it appears next to your name across the app.
- Sign-in methods. You can sign in with an email and password, with Google, or with both. You can connect a Google account that uses the same email address, or disconnect it. Google sign-in only appears if your deployment has it set up.
- Password rules. Passwords need 12 to 128 characters, with an uppercase letter, a number and a special character. New passwords are also checked against known data breaches, and only a partial hash ever leaves the server. Changing your password signs you out on all your other devices.
- Two-factor authentication. You can turn it on with an authenticator app. Confirm your password, scan the QR code and enter a code. Then save your 10 backup codes, each of which works once if you don't have your phone. You need your password to turn two-factor off.
- Sessions. You can see every device signed in to your account, then sign out any one of them or all the others.
Good to know
- Two-factor applies when you sign in with your email and password. When you sign in with Google, your Google account's own security applies instead.
- You need a password to set up two-factor. If you only sign in with Google, reset your password from the sign-in page to create one.