Password

Change at Settings → Account & Billing → Change password. Requires your current password (so a stolen session can't lock you out).

If you forget your password, hit Forgot password on the login screen — we email you a one-time reset link valid for 1 hour.

Sessions

Every time you sign in on a new device, we create a session row server-side. The active sessions list at Settings → Account & Billing → Sessions shows device, browser, last activity, and a Revoke button for each one.

Revoking a session signs that device out immediately on next request.

Email verification

You can't sign in until your email is verified. The verification link in the welcome email expires after 24 hours; if it expires, request a new one from the sign-in screen.

Two-factor authentication

Not built yet. On the roadmap.

Data export

Anything we have, you can take. Settings → Backup & Export → Export all data produces a JSON file with every contact, company, deal, task, note, tag, SMS, email, call, and recording reference. Imports from this file are also supported — see Importing data.