> ## Documentation Index
> Fetch the complete documentation index at: https://docs.causeloop.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Account, Profile & MFA

> Update your profile, manage active sessions, and set up multi-factor authentication.

Your account settings control personal information visible to teammates, your local preferences, active login sessions, and multi-factor authentication (MFA). These settings apply only to your own account — they do not affect other members of the workspace.

Access them from the user menu in the top-right corner: **Account settings**, or navigate directly to **Settings → Account**.

***

## Profile

The **Profile** section lets you update the information Causeloop shows about you.

| Field            | Description                                                                                                                                 |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------- |
| **Display name** | Your name as shown in the member roster, comments, and audit log entries. 1–200 characters.                                                 |
| **Avatar URL**   | URL to your profile picture. Max 2,048 characters.                                                                                          |
| **Timezone**     | Your personal IANA timezone (e.g. `America/Los_Angeles`). Overrides the workspace default for digest schedules and timestamps shown to you. |
| **Locale**       | Your BCP 47 locale code (e.g. `en-US`) for date and number formatting.                                                                      |

Click **Save profile** to apply changes. The UI sends `PATCH /v1/users/me` with the updated fields.

<CodeGroup>
  ```bash cURL theme={null}
  curl -X PATCH "https://api.causeloop.ai/v1/users/me" \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d '{
      "name": "Alice Chen-Lopez",
      "timezone": "America/Los_Angeles",
      "locale": "en-US"
    }'
  ```
</CodeGroup>

<Note>
  Your email address is managed through WorkOS (the identity provider). To change your primary email, update it through your WorkOS account settings. Causeloop reflects the update on your next sign-in.
</Note>

***

## Active sessions

The **Sessions** section lists every device and browser where you are currently signed in.

Each session entry shows:

* Device and browser (from the user-agent)
* IP address of the session
* Last active time
* Whether it is the **current session** (the one you are using right now)

### Revoke a session

Click **Revoke** next to any session to sign it out immediately. That device will need to sign in again. You cannot revoke your current session this way — to end the current session, use **Sign out** instead.

<Note>
  Revoking a session does not revoke any API tokens associated with your account. To invalidate tokens, go to [API Keys](/product-guide/settings/api-keys).
</Note>

***

## Multi-factor authentication (MFA)

MFA adds a second layer of verification at sign-in. Causeloop supports **TOTP authenticator apps** (such as Authy, Google Authenticator, or 1Password) and **SMS** as factor types.

### Enroll a TOTP authenticator

<Steps>
  <Step title="Click + Add authenticator">
    In the **Multi-factor authentication** section, click **Add authenticator**.
  </Step>

  <Step title="Name the factor">
    Enter a label so you can identify this factor later (e.g. `Authy — work phone`).
  </Step>

  <Step title="Scan the QR code">
    Open your authenticator app and scan the QR code shown, or enter the setup key manually.
  </Step>

  <Step title="Enter the verification code">
    Type the 6-digit code from your authenticator app and click **Verify**. Causeloop confirms the code matches before activating the factor.
  </Step>

  <Step title="Save your recovery codes">
    After successful enrollment, Causeloop displays one-time recovery codes. Store these in a safe place — they are the only way to recover access if you lose your authenticator device.
  </Step>
</Steps>

### Enroll an SMS factor

<Steps>
  <Step title="Click + Add phone number">
    Enter your mobile number in international format (e.g. `+14155552671`).
  </Step>

  <Step title="Verify the number">
    Causeloop sends a 6-digit code by SMS. Enter it in the verification field to complete enrollment.
  </Step>
</Steps>

### Use MFA at sign-in

After enrolling, Causeloop prompts for a second factor during the sign-in flow. Select the factor type, enter the code, and you are signed in.

### Recovery codes

If you cannot access your enrolled factor, use a recovery code on the MFA challenge screen. Each code can be used only once.

To regenerate recovery codes:

<Steps>
  <Step title="Click Regenerate recovery codes">
    In the MFA section, click **Regenerate recovery codes**. A confirmation prompt appears.
  </Step>

  <Step title="Confirm">
    The old codes are immediately invalidated. Copy and store the new codes.
  </Step>
</Steps>

### Remove a factor

Click **Remove** next to a factor. If MFA is required by your workspace's security policy, you must add a replacement factor before removing the existing one.

***

## API endpoints

| Method   | Path                            | Description                       |
| -------- | ------------------------------- | --------------------------------- |
| `GET`    | `/v1/users/me`                  | Retrieve your profile             |
| `PATCH`  | `/v1/users/me`                  | Update your profile               |
| `GET`    | `/v1/sessions`                  | List your active sessions         |
| `DELETE` | `/v1/sessions/{id}`             | Revoke a session                  |
| `GET`    | `/v1/mfa/factors`               | List enrolled MFA factors         |
| `POST`   | `/v1/mfa/factors`               | Enroll a new factor (TOTP or SMS) |
| `POST`   | `/v1/mfa/factors/{id}/verify`   | Verify factor enrollment with OTP |
| `DELETE` | `/v1/mfa/factors/{id}`          | Remove an enrolled factor         |
| `POST`   | `/v1/mfa/challenge`             | Create an MFA challenge           |
| `POST`   | `/v1/mfa/challenge/{id}/verify` | Verify an MFA challenge           |
| `POST`   | `/v1/mfa/recovery/verify`       | Sign in with a recovery code      |
| `POST`   | `/v1/mfa/recovery/regenerate`   | Regenerate recovery codes         |

For the full authentication reference including SSO and SCIM, see [API Reference → Authentication](/api-reference/authentication).