Account Settings
Manage your account at /app/settings/account in the web UI.
The overview page shows your email address, your current timezone, and the 2FA status. From there you can change your password, set a display timezone, manage two-factor authentication, sign out, or delete the whole account.
Change password
- Open the user menu (bottom-left on desktop, bottom navigation on mobile),
then go to Change password (
/app/settings/account/password). - Enter your current password.
- Enter your new password (at least 12 characters) and confirm it.
- Optional: turn on Revoke all refresh and API access tokens for this account. This invalidates the active refresh tokens and API access tokens.
- Click Update password.
Conduit revokes the refresh tokens and the API access tokens only when you select that checkbox.
You stay signed in on the current device after a successful change. If you forgot your current password, use the password reset flow instead.
An account that was created only through Google or GitHub sign-in has no password. To also use a password, request a password reset for the email address of the account. Conduit then emails you a link to choose one.
Timezone
By default the web UI shows timestamps in UTC. This covers the delivery logs, the audit trail, and the "created at" fields. To change the display timezone to your own:
- Open the user menu, then go to Timezone
(
/app/settings/account/settings). - Type to filter the list. For example, "copen" finds Europe/Copenhagen.
- Select a zone and click Save timezone.
The timezone is a display preference only. API responses always return timestamps in UTC (RFC 3339), and the timezone does not affect webhook payloads.
Sign out
The account overview page (/app/settings/account) has a Sign out button. It
invalidates the session cookie on the current browser only. Other browsers and
active API tokens continue to work.
Delete account
Account deletion is permanent. The deletion removes:
- All webhooks and their settings
- All delivery logs and history
- All SMTP security policies and custom domains
- All API tokens
There is no recovery path and no grace period.
To delete the account:
- Open the user menu, then go to Account details and click
Delete account (
/app/settings/account/delete). - Type your email address into the confirmation field, exactly as it is shown.
- Enter your password.
- Click Delete my account.
To stop traffic for a short time only, deactivate the affected webhooks instead. See Managing Webhooks.
Next steps
- Two-factor Authentication. Set up, manage, or disable 2FA.
- API Tokens. Long-lived credentials for programmatic access.
- Audit Log. Read a history of security changes and settings changes.