Profile

The Profile pages hold the details that describe you on your account: a display name, an optional username and a short bio, a picture, your language and time zone, and the email addresses the platform uses to reach you. Applications you sign in to can receive some of these details, but only where they ask for your profile and you allow it.

It is for any account owner. Most of it is low risk, so it opens without a second factor. The exception is the email address you are known by, which is also how sign-in links and recovery reach you, so changing the primary address is treated as a sensitive action.

Profile is one page with no tabs. The details card holds the picture, the text details, the language and the time zone together, saved with Save details, except that the picture saves on its own. The email addresses sit beside it in their own section, because an address has a life of its own: it is added, verified with a code, made primary or removed, all on the same page. Notices about your account go to every verified address, so more than one verified address is also a safety net.

Details card:    picture | name, username, bio | language, time zoneEmail section:   add -> verify -> primary / removePrimary change:  confirm it is you -> other sessions end -> old address can undo

I just signed up and want the account to look right.

1. Name, username and bio: set how you appear to applications.
2. Picture: add one, or keep your initials.
3. Language and time zone: make times and text match you.

I want a second way to be reached.

1. Email addresses: add and verify a second address.
2. The security checkup: the Second email check now counts.

My old address is going away.

1. Email addresses: add and verify the new one first.
2. Change your primary email and undo it: make it primary.
3. Email addresses: remove the old one once the undo window has closed.

Name, username and bio lists the fields and their rules: a display name of 1 to 200 characters, an optional username of 3 to 32 letters, digits or underscores that is unique regardless of capitals, and a bio of at most 280 characters. It says who sees what and what the page says when a username is taken.

Picture explains that your browser shrinks the image to at most 512 pixels on its long side before sending it, that only PNG, JPEG and WebP are accepted, that the result must fit in 128 KiB, that the picture is served from a public address an application can show, and how to remove it so your initials show instead.

Language and time zone explains the two pickers, the button that fills each from your browser, and where they are used.

Email addresses covers the list and its badges (Primary, Verified, Not verified), adding an address, verifying with a code, sending a new code, making an address primary and removing one.

Change your primary email and undo it explains what the platform does when you change it: it asks you to confirm, ends your other sessions, tells every verified address and gives the old address a link to undo the change for 24 hours.

Sign in. To change the primary address you need a second factor used in the last 30 minutes, so have a passkey or an authenticator app ready. If you have neither, set one up first from The Security overview.

Is a username required? No. A new account starts with one made from the part of your email address before the @, and you can change it or empty it to have none. See Name, username and bio.

Can I use any image? PNG, JPEG or WebP. See Picture.

Can I make an unverified address primary? No. It must be verified first. See Change your primary email and undo it.

Do security notices go only to my primary address? No. They go to every verified address. See Email addresses.

What if someone changed my primary address? The old address gets an email with a button that reverts the change. See Change your primary email and undo it.

It does not cover how you sign in, which is in Security, or which emails you receive, which is in Notifications. What the platform does with your profile data is on the Privacy page. How an application receives the profile is explained in Scopes and consent.