Account Settings
Manage your account from /app/settings/account in the web UI.
The overview page shows your email address, current timezone, and 2FA status. From there you can change your password, set a display timezone, manage two-factor authentication, sign out, or delete the account entirely.
Change password
- Open the user menu (bottom-left on desktop, bottom navigation on mobile), then go to Change password (
/app/settings/account/password). - Enter your current password.
- Enter your new password (minimum 12 characters) and confirm it.
- (Optional) Enable Revoke all refresh and API access tokens for this account if you want to invalidate active refresh/session continuation and API access tokens.
- Click Update password.
Conduit revokes refresh tokens and API access tokens only when you select the checkbox above.
You stay signed in on the current device after a successful change. If you have forgotten your current password, use the password reset flow instead.
Accounts created entirely through Google or GitHub sign-in have no password set. To use a password as well, request a password reset for your account email; Conduit emails you a link to choose one.
Timezone
By default, timestamps in the web UI (delivery logs, audit trails, "created at" fields) are shown in UTC. Change the display timezone to match your own:
- Open the user menu, then go to Timezone (
/app/settings/account/settings). - Type to filter the list (e.g. "copen" finds Europe/Copenhagen).
- Pick a zone and click Save timezone.
Timezone is a display preference only. API responses always return timestamps in UTC (RFC 3339), and webhook payloads are not affected.
Sign out
The account overview page (/app/settings/account) has a Sign out button.
This invalidates the session cookie on the current browser only; other
browsers and active API tokens are not affected.
Delete account
Account deletion is permanent. Deleting removes:
- All webhooks and their configurations
- All delivery logs and history
- All SMTP security policies and custom domains
- All API tokens
There is no recovery path and no grace period.
To delete:
- Open the user menu, then go to Account details and click Delete account (
/app/settings/account/delete). - Type your email address into the confirmation field exactly as shown.
- Enter your password.
- Click Delete my account.
If you only want to stop traffic temporarily, deactivate the affected webhooks instead. See Managing Webhooks.
Next steps
- Two-factor Authentication. Set up, manage, or disable 2FA.
- API Tokens. Long-lived credentials for programmatic access.
- Audit Log. Review a history of security and configuration changes.