User Accounts & Linked Emails

Your account and your profile

An account is a username and a password. Where an admin created it for you, that username is what you were given, and it is what the sign-in page means by "email or username".

Settings opens on your profile, where the username sits alongside an avatar and an optional first and last name. Those names are what colleagues see beside your messages, your timeline entries, and the changes you make, so they are worth filling in even though nothing forces it.

Changing your username changes what you sign in with, so it is worth remembering the new one.

Why an account needs an email

An account can exist without one. A member added by an admin gets a username and a password and nothing else, and until an address is linked, PortzApp has no way to reach that person and no way to get them back in.

Emails is where that is fixed. A verified address does three things: it signs you in, it receives your notifications, and it recovers your account when the password is gone.

More than one can be linked, which is what makes a work address and a personal one both useful. Losing access to one no longer locks you out.

Verifying an address

A new address arrives unverified and stays that way until you confirm it. PortzApp sends both a link and a six-digit code, so you can click through from the inbox or type the code into the panel, whichever is to hand.

Two things rescue an address that is not arriving. Resend code sends it again after a short wait, and Change email corrects a mistyped address without starting over.

Until an address is verified it cannot sign you in and cannot be made primary.

Primary and secondary

One address is primary and the rest are secondary.

Any verified address can take over as primary, which is how an account moves to a new work address without losing the old one. Every verified address still signs you in either way, so primary is which one leads rather than which one works.

Removing an address, and changing your password

Removing an address is permanent and confirmed first; a verified address that is removed can no longer be used for login, notifications, or account recovery.

Your password is changed under Security, which asks for the current one alongside the new. That works whether or not an address is linked.

Forgetting it is where the difference shows. The reset link on the sign-in page goes to an email address, so an account without one cannot recover itself and has to be reset by an organization admin, who is shown the new password to pass on. Linking an address is what makes that unnecessary.

Keeping your account secure

Everything that protects your account beyond the password is under Security. Open the account menu at the top of the sidebar, choose Personal settings, then select Security.

Two-factor authentication

Two-factor authentication adds a second step to signing in: a six-digit code from an authenticator app on your phone. Someone who learns your password still cannot get in without it.

When you set it up, you get 8 recovery codes. Each one can be used once, in place of the code from your app, if you lose your phone. They are your way back in, so setup is not finished until you save them. Generating a new set cancels the old one.

Your organization can require two-factor authentication for every member, and PortzApp can require it for some accounts. When it is required, you cannot turn it off.

Passkeys

A passkey lets you sign in with your fingerprint, face or device PIN, without a password or a code. It is stored on your device or in a password manager such as Apple Passwords or Google Password Manager. You can add more than one, name them, and remove any you no longer use.

Where you are signed in

Active sessions, at the bottom of Security, lists every browser and device signed in to your account, with where and when each was last used. You can sign out any device you do not recognise, or every device except the one you are using.

How many devices you can use at once depends on your plan:

• Standard: one at a time. Signing in on another browser or device signs out the one you were using.
• Pro: no limit.

Organization Admins can also see where members are signed in. Open Members from the account menu, then select Review sessions for everyone, or View sessions in a member's row menu for that person. From there, an Admin can sign a member out of a browser, for example when a device is lost.