# Account

> Your personal profile: avatar, name, email, two-factor authentication, the in-app feedback button, and account info.

Source: https://productos.ca/documentation/pages/settings/account (last reviewed 2026-10-04)

The Account section is your personal record, separate from the workspace you belong to.

## What you can change

- **Avatar**: **Upload image** takes a PNG, JPEG, WebP or SVG up to 5 MB. You crop it to a circle (drag to move, scroll, the slider or `+` and `-` to zoom, `Enter` to save), and ProductOS stores a 512 pixel square. **Replace image** and **Remove** change it later; without one you see your initials. It shows on your account button, in Members & Roles and on the team roster rows linked to you, unless someone set a different photo on that roster row.
- **Full name**.
- **Email**: read-only here. Contact support to change it.
- **Password**: not changed from Settings. Use **Forgot password** on the sign-in page to get an emailed reset link.
- **Two-factor authentication (TOTP)**: scan the QR with your authenticator and confirm a 6-digit code; recovery codes are generated right after. The Security panel shows how many codes remain and lets you generate a fresh set or remove the authenticator.
- **Show in-app feedback button**: hides or shows the floating feedback launcher in this browser. `⌘/` / `Ctrl+/` still opens it.
- **Account info**: read-only user ID and account creation date.

## When MFA is required

Workspace owners can require MFA workspace-wide under **Settings → Workspace → Security**. Once enabled, your next page load is redirected to two-factor setup until you enroll; enrolled users clear a `/mfa-challenge` step at sign-in.

## Skipping 2FA for Google and Microsoft sign-ins

While this is available for your workspace, the owner can let Google and Microsoft sign-ins skip the authenticator code under **Settings → Workspace → Security**, and you then turn it on for yourself with **Skip 2FA when I sign in with Google or Microsoft** in your Security panel. The owner can also pick **Turn on for everyone**, so every member skips without opting in, including people who join later; your switch then shows on and can't be changed. Once it applies to you:

- **Continue with Google** or **Continue with Microsoft** takes you straight in, with no `/mfa-challenge` step, and a workspace that requires 2FA doesn't send you to enroll.
- A password sign-in still asks for your code.
- By default only work or school accounts qualify: Google Workspace accounts and Microsoft work or school accounts, whose own company sign-in policy stands in for the code. The owner can include personal Gmail and Outlook.com accounts too, except while the workspace requires 2FA.
- Viewing or generating recovery codes still needs a session where you entered your code.

The Security panel lists the Google and Microsoft accounts linked to you and whether each one qualifies.

## Delete account

There is no self-serve account deletion in Settings; contact support to delete your account.

If you're the workspace's owner, transfer ownership first: open Settings → Members & Roles and pick **Owner** in another member's role dropdown.

## Related

- [Members and roles concept](https://productos.ca/documentation/guides/concepts/workspaces-and-roles)
- [Members & roles page](https://productos.ca/documentation/pages/settings/members-and-roles)