Your account

This section is for people who use a TDACorp account rather than build on it. It describes each page of the account area, one task at a time, says what every control does and what the platform does in response. The account is yours: organizations and applications are linked to it, and you can see and change those links here.

The account area opens on Overview. The account navigation (a column on the left on wide screens, a strip across the top on phones) reaches Overview, Profile, Security, Devices, Apps and access, Organizations, Notifications and Your data. The organization switcher heads the navigation and an account menu (your name, Docs, Trust and legal, Sign out) foots it; on a phone both sit in the strip. A search field in the top bar, Search settings, opens a palette for jumping to any page or action.

1. Finish setting up: a checklist of steps that protect the account, with how many are done and a Set up button on each step that is not. It shows only while the account is new (the first seven days) and at least one step is not done.
2. Security posture: a score out of 100 with the next things to do, in order. See security opens the Security overview, where the Checkup tab has the full list.

The account area has three layers. Your identity is who you are: your details, email addresses, language and time zone. Your protection is how you prove it: passkeys, a password, an authenticator app and recovery codes, plus the devices and sessions that already hold a sign-in. Your relationships are everything that holds access on your behalf: connected applications, agents, access tokens and organizations. Notifications and your data sit across all three and tell you what happened and let you take it with you.

Profile  ->  who you are          Security  ->  how you prove itDevices  ->  where you are in     Apps and access  ->  who acts for youOrganizations  ->  where you belongNotifications, Your data  ->  what happened, and what is held

Sensitive changes ask for a second factor you used in the last 30 minutes, and some of them are held back from a browser the account met less than 24 hours ago. The pages tell you when that applies.

I just signed up.

1. The Security overview: see every way you can sign in and its status.
2. Passkeys: add a second passkey on another device.
3. Recovery codes: keep a way back in.
4. Email addresses: add a second verified address.

I lost my phone.

1. Sessions: sign out everywhere.
2. Passkeys: remove the passkey that lived on it.
3. The security feed: check for anything you did not do.
4. Activity: read the last 90 days in full.

I want to leave or take my data.

1. Connected apps: revoke what you no longer use.
2. Exporting your data: get a signed copy.
3. Closing your account: deactivate it.

Profile answers how to set your name, username, picture, language, time zone and email addresses, and how to change the primary address and undo a change you did not make. Security answers how you sign in: the overview, the checkup score, passkeys, a password, an authenticator app, recovery codes, linked accounts and merging accounts. Devices answers where you are signed in and which browsers the account knows. Apps and access answers what applications may see, how to create a personal access token and how to use it. Organizations answers what membership means, how to join, choose and leave. Notifications answers where security events appear and which emails you receive. Your data answers what the platform recorded in the last 90 days, how to export it and what closing the account does. Search and keyboard use explains the search palette and its keys.

You need an account, so start with Getting started if you have none. Many security pages ask you to confirm it is you first, so having a passkey or an authenticator app ready makes them easier. An account with only a password cannot make some sensitive changes until it adds a second factor.

Why am I asked to confirm it is me? The page needs a second factor used in the last 30 minutes. See Confirm it is you.

Can I stop security emails? No. Security alerts are always sent, and two optional emails can be switched off. See Email preferences.

How do I see where I am signed in? Open Devices, then Sessions. See Sessions.

What happens when I close my account? You are signed out at once and personal data is erased after 30 days. See After you close your account.

Can a script act for me? Yes, with a personal access token that works on your profile only. See Access tokens.

It does not describe the sign-in screens, which are in Signing in and recovery, or advice on choosing methods, which is in Security for users. What the platform collects and how long it keeps it is on the Privacy and Retention and deletion pages. If a message is unclear, look the code up under Error codes.