Skip to content

User Settings

The User Settings screen is where each user manages their own account — name, email, language, password, two-factor authentication, billing, and appearance. It is opened from the profile menu at the bottom-left of the sidebar (click your name → User Settings).

Unlike App Settings — which configures the whole shop and is shared by everyone — the User Settings screen is per-user: changes only affect the signed-in account.

Open it from /settings/profile, or from the User Settings entry in the profile menu.

User Settings — Profile


TabWhat it covers
ProfileName, email, UI language. Plus Delete account and Delete Organization danger-zone actions.
PasswordChange the password used to sign in.
Two-Factor AuthEnable / disable TOTP (authenticator app) for the signed-in account.
API KeysPersonal API tokens — see the dedicated docs.
BillingYour account’s subscription, payment method, and invoices.
AppearanceChoose between Light and Dark theme.

The default tab. Three editable fields plus the danger zone:

  • Name — your display name. Shown in audit fields (“edited by …”), the profile menu, and on any user-facing UI.
  • Email address — the address you use to sign in. Changing it requires confirming the new address.
  • Language — UI language for the Admin Panel. Supported: DE, EN, ES, FR, PL, PT. Updates take effect on the next page load.

Click Save to apply.

A red Delete account button removes your individual user account. All API keys you created are revoked at the same time. You cannot undo this.

If you are the last admin on the organization, deleting your account is blocked — the org needs at least one administrator. Promote a colleague first, then delete.

A separate red Delete Organization action permanently removes the whole organization — every order, job, template, employee, user, and uploaded file. There is no undo, no soft delete, no trash. Only the owner of the organization should ever touch this.

Treat both delete actions as a one-way door. Export any data you might need first via the Time Tracking Excel export and the Jobs CSV export.


Change your sign-in password. Standard fields:

  • Current password
  • New password
  • Confirm new password

Save to apply. You stay signed in on this device; other sessions are not automatically logged out.

If you’ve forgotten your current password, sign out and use the Forgot password? link on the login screen instead.


Enable a second factor (TOTP) so a password alone isn’t enough to sign in.

  1. On the Two-Factor Auth tab, click Enable.
  2. Scan the QR code with your authenticator app (Authy, 1Password, Google Authenticator, Microsoft Authenticator).
  3. Enter the 6-digit code from the app to confirm.
  4. Save your recovery codes somewhere safe — they’re the only way to sign in if you lose access to your authenticator.

Once enabled, every sign-in asks for the 6-digit code after the password.

To disable, enter your current password and a fresh 6-digit code, then click Disable.

Recommended for every admin. Shop floor data, customer information, and integration keys all live behind the Admin Panel login. Password-only auth is too thin a defense for an account that can edit anything.


Personal API tokens — full reference at API Keys Settings.


Manage the organization’s subscription:

  • Plan — current plan and a button to upgrade or change.
  • Payment method — credit card on file.
  • Invoices — downloadable PDFs of past invoices.
  • Trial info — if you’re on a trial, when it ends.

Billing is per-organization, not per-user. Even though this tab lives under your personal User Settings, the data shown is the org’s. Non-admins typically don’t have access to make changes here.


A single toggle: Light or Dark theme. The choice is saved per-browser, per-user and applies to the Admin Panel.

(The public Kiosk and Client Portal have their own theme handling — see Kiosk URL parameters and the Order tracking page’s ?theme=dark flag.)


  • Set a strong password and enable Two-Factor Auth on day one. The Admin Panel can read every order, every customer, every time entry. Treat it like banking.
  • Use a real email address. Password resets, billing notices, and system emails all go there.
  • Save your recovery codes off-device. A lost phone and forgotten recovery codes means a support call — sometimes a long one.
  • Don’t share accounts. Audit trails are useless when “who did this?” answers “the shared account”. Create a separate User for every colleague — see Users.
  • For shop-wide automation, prefer a dedicated service-account User rather than your personal API keys — see the note in API Keys Settings.