Account & security settings
Account, Billing, Security, and API keys each get their own tab. The Account tab is read-only; the other three are where you make changes.
Account
The Account tab is read-only. It shows:
- Email — the address you sign in with.
- Account status — your account's current standing.
- Role — your role on the account.
- Onboarding — Complete or Incomplete. This flips to Complete once you save a billing profile.
Billing profile
On the Billing tab, the name and address you save here appear on every invoice.
Pick an account type first:
- Individual — needs your full name and address.
- Business — also requires a Company name and a GST / Tax ID.
Fill in the required fields (marked with an asterisk): full name, address line 1, city, state,
postal code, and country. Country is a two-letter code, such as IN. Phone, Address
line 2, and PAN are optional. When everything checks out, select Save billing profile.
Saving unlocks onboarding
Saving a valid billing profile marks your Onboarding as complete on the Account tab.
Identity verification
Identity verification (KYC), also on the Billing tab, unlocks full access. How it works depends on how your account is set up:
- Guided flow — you continue on a secure verification partner (such as Stripe Identity or Digio) to photograph your ID. Select Start verification, finish on the partner's page, and we confirm the result automatically. Refresh after a moment to see it update.
- Manual review — you upload your documents here: your full legal name, date of birth, ID type (passport, national ID, or driver's license), ID number, and a photo of the front of your ID (the back is optional). Then select Submit for verification. Manual reviews usually take about a business day.
Once approved, the section shows a Verified badge and the form disappears. If a submission is rejected, you'll see the reason and can try again.
Documents are encrypted
Your details and document images are encrypted, and manual submissions are only seen by our review team.
Password
The Security tab starts with Password. Enter your current password, then a new one (at least 8 characters) and confirm it. Select Update password to apply the change.
Changing your password signs out other devices
Updating your password signs out every other device immediately. The device you changed it on stays signed in.
Phone
Verifying a phone number unlocks hourly billing. Under Phone on the Security tab:
Enter your number
Type your phone number in international format, e.g. +14155551234, then select Send code.
Enter the code
We text you a 6-digit code, good for 10 minutes. Enter it and select Verify. Wrong number? Select Change number to start over. If SMS delivery isn't set up on your account, the console says so instead of texting — ask your admin for the code.
Once verified, the section shows a Verified badge next to your number.
Two-factor authentication
With two-factor authentication (2FA) on, every login also asks for a code from an authenticator app on your phone.
Start setup
Under Two-factor authentication on the Security tab, select Enable 2FA.
Add it to your authenticator app
Scan the QR code with your authenticator app. Can't scan? Enter the setup key shown next to the code manually instead.
Confirm the code
Enter the 6-digit code from your app and select Verify & enable. The badge switches to Enabled.
To turn it back off, enter a current code from your app and select Disable 2FA.
Turn on 2FA
A password alone can be phished or reused. With 2FA on, a stolen password isn't enough to get into your account.
Active sessions
The Active sessions section lists every device signed in to your account, with its browser and operating system, IP address, and when it was last active. Your current device is marked This device.
- To sign out a single device, select the trash icon next to it.
- To sign out everything except the device you're on, select Sign out other devices and confirm.
If you spot a session you don't recognize, revoke it and change your password.
API keys
Everything you can do in the console, you can do over the API. The API keys tab is where you create the keys that authenticate those calls from your own scripts and integrations.
Start a new key
Select New key and give it a descriptive name (like CI deploy), so you know what it's for
later.
Choose access and expiry
Pick Full access (read + write) or Read-only (GET only), and an expiry — Never, 30 days, 90 days, or 1 year. Read-only keys are safe for dashboards and monitoring.
Create and copy the key
Select Create key. The full token appears once — copy it with the Copy button and store it somewhere safe.
The key is shown only once
You see the full API key exactly once, right after you create it. It's never shown again. Save it to a secrets manager (not your source code); if you lose it, revoke the key and create a new one.
Each key in the list shows its name, prefix, when it was last used, and its expiry; read-only keys also carry a Read-only tag, while full-access keys show no scope label. To revoke a key, select the trash icon and confirm — it stops working immediately for any script or integration using it. Give each integration its own key so you can revoke one without disrupting the rest.
For how to authenticate requests with your key, see the Authentication guide.