Account and security

Open the user menu and select Settings.

• On Profile, update your name or email address and select Save. A changed email may require verification before full application access resumes.
• On Security, enter the current password, a new long and unique password, and confirmation, then select Save.
• Security settings may require recent password confirmation before they open.

Use an individual account rather than sharing credentials. Organisation access can be granted through Team without sharing the owner login.

1. Open Settings → Security.
2. Under Two-factor authentication, select Enable 2FA.
3. Scan the QR code with a TOTP-compatible authenticator app, or enter the manual setup key.
4. Enter the six-digit code from the authenticator and confirm setup.
5. Store the recovery codes in a secure location separate from the device used for authentication.

At sign-in, enter the current authenticator code when prompted. If the authenticator is unavailable, use one unused recovery code. Regenerating recovery codes invalidates the old set.

Passkeys use a supported browser, device, security key, or password manager to authenticate without typing the account password.

1. Open Settings → Security and find Passkeys.
2. Select the add-passkey action and follow the browser or operating-system prompt.
3. Give the passkey a recognisable name when requested.
4. At a later login, choose the passkey option and approve the device prompt.

The Passkeys list shows when each credential was added and last used. Remove a passkey immediately if its device, security key, or password-manager access is lost or transferred.

Open Settings → Desktop connections to manage the private credentials that let a desktop AI use UX Robot autopilot on your behalf. Password confirmation is required before this page opens.

1. Enter a recognisable computer name, such as John MacBook, and select Connect a desktop.
2. Copy the connection instruction when it appears and add it to the trusted desktop AI. The private credential is shown only once.
3. For each audit, use the analysis handoff’s Copy run instruction. Do not create another desktop connection for a new audit or chat.

Each connection lasts 90 days and works across the organisations and audits your UX Robot account can access. The list shows the computer name, status, date added, last use, and expiry. You can keep up to five active connections. Expired connections do not count towards that limit and can be removed. Removed connections disappear from the list rather than remaining as revoked history.

Under Settings → Appearance, choose Light, Dark, or System. System follows the device’s current preference.

On public marketing pages, use Cookie settings in the footer to accept or reject optional Google Analytics. The choice is remembered for six months and can be changed at any time. Website analytics is not used inside authenticated workspaces or shared reports.

Account deletion is available from Billing and, where shown, Profile settings. Before deleting:

• export anything the organisation is legally or operationally required to keep;
• tell affected team members and report recipients;
• understand that the owner subscription is cancelled;
• understand that organisations, reports, access, and unused units are permanently lost without a refund; and
• enter the password and confirm the destructive action only when you intend it to be final.

If Stripe cancellation fails, UX Robot stops the deletion and displays an error so the subscription is not silently left active. Resolve the billing problem and try again or use the contact form.