---
title: "Account and security"
description: "Manage your profile, password, two-factor authentication, passkeys and theme, and recover or delete your account."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.meetfullhouse.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Account and security

These settings belong to your login, not your workspace, and each person on your [team](/workspace/team) has their own. Use them to change your name or email, keep your account secure, and get back in if you're locked out.

Click your name at the bottom of the sidebar and choose **Settings**. On a phone, open the menu at the top right first. There are three tabs: **Profile**, **Security** and **Appearance**. You sign in at `app.meetfullhouse.com`.

## Sign in

Enter your **Email address** and **Password** and click **Log in**, or click **Sign in with a passkey** if you've [added one](#use-passkeys). There's no public sign-up form: accounts are created when you buy or when you're [invited to a team](/workspace/team), and you get an email with a link to [set your password](/start/account-setup).

Tick **Remember me** to stay signed in for 30 days. Otherwise, you're signed out 2 hours after signing in, even if you're still working, so tick it on your own computer. If a session has expired when you next save, you'll be sent back to the login page, and the change you were saving isn't kept.

| Message | What to do |
| --- | --- |
| These credentials do not match our records. | Check the email and password, or [reset your password](#reset-a-forgotten-password). |
| Too many attempts. Please retry later. | You've made five attempts in a minute. Wait a minute. |

## Log out

Click your name at the bottom of the sidebar and choose **Log out**. This signs out the browser you're using. Your other devices stay signed in. To sign those out too, [change your password](#change-your-password).

## Update your profile

On the **Profile** tab, change **Name** or **Email address** and click **Save**. Your name can be up to 255 characters.

### Change your email address

Your email address is what you sign in with, and where account emails and test emails go. Your attendees never see it. To set the address they see, use [Email settings](/workspace/email).

Changing it takes a few steps, and you can't use the app until you've verified the new address, so do it when you have a few minutes and access to the new inbox:

1. **Save the new address**

   Enter it on the **Profile** tab and click **Save**. It takes effect straight away, and a verification email goes to the new address. You'll see "A new verification link has been sent to your email address." Saving the same address sends nothing. If another account uses it, you'll see "This email address is already in use."
2. **Open the link**

   Open the link in the browser where you're signed in. It works for one hour. If it has expired, or the email hasn't arrived, use **Resend verification email** on the **Email verification** page, which you'll land on when you open any part of the app.

If you mistyped the address, the **Email verification** page says "We sent it to" and the address, followed by "Wrong address?" and a link to change it on your profile.

You can make six changes or resends a minute, shared between the two. Past that, the change is refused with "Too many attempts. Please retry later." and your address stays as it was.

Your webinars, pages and emails keep running while your address is unverified. Only your access to the app is held up.

## Change your password

Open the **Security** tab. If you haven't confirmed your identity in the last 3 hours, you'll be asked to first, with your password or a passkey.

Enter your **Current password**, your **New password** and **Confirm password**, then click **Save**.

**Password rules:**

- 12 to 72 characters
- At least one uppercase letter, one lowercase letter, one number and one symbol
- Not on a list of passwords exposed in known data breaches

| Message | What it means |
| --- | --- |
| Use 12–72 bytes with uppercase, lowercase, a number and a symbol. | The password doesn't meet the rules. Emoji and accented letters use more than one byte each, so a very long one can go over. |
| This password has appeared in a data breach. Choose another password. | It's been found in a leak, so attackers may try it. Pick a different one. |
| The password confirmation does not match. | The two new password boxes are different. |
| The password is incorrect. | **Current password** is wrong. |

The breach check is private: your password isn't sent anywhere. FullHouse sends only the first few characters of a scrambled version to the breach-checking service, and compares the results itself. If that service is unavailable, the other rules still apply.

Changing your password signs out your other devices. A password manager's generated password is the best choice, and many will follow these rules automatically.

## Reset a forgotten password

1. **Request a link**

   On the login page, click **Forgot your password?**, enter your **Email address** and click **Email password reset link**. You'll see "If an account exists, a password reset link has been sent." whether or not the address has an account.
2. **Open the email**

   Look for "Reset your FullHouse password" and click **Choose a new password**. The link works for one hour and only once. Asking for another link cancels the previous one.
3. **Set a new password**

   Enter **Password** and **Confirm password**, then click **Reset password**. The same rules apply.
4. **Sign in**

   You're signed out everywhere, so sign in again with the new password.

If you see "This reset link is invalid or expired.", request a new one. You can request five links a minute. If nothing arrives, check spam and that you used the address you sign in with.

The set-password link in your welcome email works the same way, but lasts a year, and it signs you in as soon as you've chosen a password. If it's expired or was already used, click **Email me a new link** on the page that opens. That takes you to the form above with your address filled in.

## Turn on two-factor authentication

Two-factor authentication (2FA) means that signing in with a password also needs a 6-digit code from an app on your phone, so a stolen password isn't enough. You can use any authenticator app, such as 1Password, Google Authenticator or Authy.

1. **Start setup**

   On the **Security** tab, under **Two-factor authentication**, click **Enable 2FA**.
2. **Scan the code**

   Scan the QR code with your authenticator app, or copy the setup key under "or, enter the code manually". Click **Continue**.
3. **Confirm a code**

   Enter the 6-digit code from your app and click **Confirm**. 2FA isn't on until you do this. If you close the window first, click **Continue setup** to finish.
4. **Save your recovery codes**

   Under **2FA recovery codes**, click **View recovery codes** and store them in a password manager.

### Sign in with 2FA

After your password, enter the code under **Authentication code** and click **Continue**. You have 5 minutes before you need to enter your password again.

"The authentication code is invalid or has already been used." has three common causes: a typo, a code you've already used (wait for the next one), or your phone's clock being wrong (set it to update automatically).

Signing in with a passkey doesn't ask for a code, because a passkey already proves both things.

### Use a recovery code

If you don't have your phone, click **login using a recovery code** on the code screen, enter one and click **Continue**.

You get 8 codes. Each works once and is removed after use. To see what's left or get a new set, open **2FA recovery codes** on the Security tab. **Regenerate codes** appears once the codes are showing, and it replaces all of them, so the old ones stop working.

:::caution
If you lose your phone and your recovery codes, and have no passkey, you can't sign in by yourself. A password reset doesn't remove 2FA. Contact support.
:::

### Turn off 2FA

Click **Disable 2FA** on the Security tab. It turns off straight away, with no second confirmation, and your recovery codes are removed. Turning it on again gives you a new QR code and new recovery codes, so remove the old entry from your app.

## Use passkeys

A passkey lets you sign in with your fingerprint, face or device PIN instead of a password. It can't be phished, and you don't have to type anything.

**Add one:**

1. On the **Security** tab, under **Passkeys**, click **Add passkey**.
2. Check the **Passkey name**. It's filled in with something like "Chrome on Mac". Names can be up to 255 characters.
3. Click **Register passkey** and follow your browser's prompt.

Add one on each device you use. Some password managers and device accounts sync passkeys for you.

**Use one:** on the login page, click **Sign in with a passkey**. You can also use it to confirm your identity on the Security tab.

**Remove one:** click the trash icon beside it, then **Remove passkey**. Each passkey shows when it was added and last used, which helps you spot old ones.

You keep your password when you add a passkey, so you can still sign in the other way.

| Message | What to do |
| --- | --- |
| Passkeys are not supported in this browser. | Use a recent browser, or a device with a screen lock set up. |
| The passkey could not be verified. Please try again. | Try again. If you canceled the prompt or took more than five minutes, restart. Check that you're on `app.meetfullhouse.com`. |

## Choose your theme

On the **Appearance** tab, pick **Light**, **Dark** or **System**, which follows your device. It saves as soon as you click. It starts on **System**. You can also cycle through them with **Theme** in the menu under your name, which shows the current choice, such as **Theme: Dark**.

This is remembered for your browser, so you can set it separately on each device. It's only for you: attendees see your [branding](/workspace/branding).

## If your account is suspended

If your workspace is suspended, signing in shows one page saying it's suspended, with a **Log out** button, instead of your dashboard. While suspended:

- Registration pages, waiting rooms, rooms and replays stop working, and visitors get a page-not-found error.
- Scheduled emails are skipped rather than sent. They aren't sent later when the suspension ends.
- Pinball can't register people.
- Nothing is deleted.

If you think it's a mistake, reply to any email from us or contact support.

## Delete your account

:::danger
This permanently deletes your login, your workspace and everything in it: webinars, challenges, registrants, reports and connections. It can't be undone. Attendee pages stop working, and scheduled emails stop.
:::

Only the workspace owner can delete the account. The section doesn't appear for [team members](/workspace/team), and a direct attempt says "Only the workspace owner can delete accounts. Ask them to remove you from the team." Your team members keep their logins, and see **You no longer have access** when they sign in.

Your webinars, challenges, registrants and settings are deleted straight away. Your hosted videos, images and files are removed and their links stop working shortly after, and your FullHouse Send address and Pinball link are removed too. We keep a record of any purchase.

Before you do:

- [Export the registrants](/run/registrants) you want to keep.
- Save any video or file you need from the [media library](/workspace/media-library).

Then, on the **Profile** tab, under **Delete account**, click **Delete account**. Enter your password and click **Delete account** to confirm.

Source: https://docs.meetfullhouse.com/workspace/account-security/index.mdx