Help
Your account
Your name, photo, password, and security settings live in the menu behind your photo at the top right. These are personal to you. They are not in the sidebar.
1. Account Information
Open Account Information to change the details on your login.
In the app
- Your photo
- Account Information
- First name, last name, and UK mobile are editable. Save with Save All Changes.
- Email is not edited on this screen. Use Request Email Change. An administrator reviews the request. Allow at least 24 hours.
- Change Password needs your current password and a new one that meets the strength rules.
- Managers can edit billing address and company name, VAT, and company number. Saving the address updates the address on your invoices. Staff see those fields as read-only from their manager.
2. Profile photo
The Profile Image section is on the same Account Information page. Upload a photo, crop it, then confirm.
In the app
- Your photo
- Account Information
- Profile Image
- JPEG, PNG, WebP, GIF, or iPhone (HEIC) photos are allowed. Recommended size is 400×400 pixels, maximum 5MB.
- After you choose a file, crop it in Crop ID Photo, then Confirm & Upload.
- There is no remove control in the main app. Replace a photo by uploading a new one.
3. Two-factor authentication
Two-factor authentication is required on every account and cannot be turned off. You can switch method on Security.
In the app
- Your photo
- Security
- Choose Authenticator app (recommended) or SMS. SMS needs a UK mobile on your profile.
- When you set up an authenticator, save the backup codes. You can copy or download them. Use one at sign-in if you cannot open the app.
- Trusted Devices skip two-factor checks for 30 days. Remove trust on a device you no longer use.
- SMS sign-in codes do not appear in your portfolio SMS audit log.
4. Account activity
Account Activity shows where you have signed in, which sessions are open, and a history of attempts.
In the app
- Your photo
- Account Activity
- Dashboard
- Last login
- The map summarises sign-ins by country.
- Active Sessions lists devices currently signed in. You can remove access for one session, or sign out all other devices.
- Login History records success and failed attempts, with device type, date, IP address, and location where known.
Email digest preferences are covered in Email notification settings. The header bell is covered in The notification bell.

