How do I change my name?

1. Open your account menu, the round mark with your initial. Choose Settings. It has four sections: Profile, Security, Notifications and Activity.
2. Profile is your display name and the address you sign in with. Change the name and press Save changes. It tells you whether it saved.
3. You cannot change your email address here, because it is your sign-in identity: the one-time code goes to it. If it must change, email admin@yourca.ai.
4. There is no password to change. YourCA has no passwords at all. To sign in, you type your email address, then the one-time code that arrives in your inbox. There is nothing to forget, and no note on a desk for anybody to steal.
5. Security is two-factor sign-in and your signed-in devices. Two-factor adds a six-digit code from an authenticator app on top of the emailed code. It also gives you ten recovery codes. Write them down when they appear. They show only once.
6. To set it up, you scan a picture. You do not type. Press Turn on, and YourCA shows a square.
7. Open your authenticator app and point its camera at the screen. It takes the key itself.
8. The key is also written out underneath, for a desktop with no camera or a phone that does not let you use one.
9. Either way, then type the six digits your app shows. That proves the key went in.
10. When you turn two-factor on, it also signs you out on every other device. Anything already signed in must sign in again with the new second factor. To turn it off, you must give a live code or a recovery code first.
11. Anybody signed in can turn two-factor on for their own account. It covers only the person who switched it on. It does not change how anyone else on the account signs in.
12. If you lose the phone and your recovery codes too, email admin@yourca.ai from the address you sign in with. We check who you are, then clear two-factor from your account.
13. That signs you out everywhere, and you go back to the emailed code alone. Turn two-factor on again when you have the new phone. Your account record shows who cleared it and why.
14. After ten wrong second-factor codes in a row, that account is not asked for more codes for fifteen minutes. It tells you so, and does not give you an eleventh wrong answer.
15. It counts the authenticator code and the recovery codes together. Nobody outside can start it against you. Only a person who already has the code from your inbox can reach it.
16. Where you are signed in lists every device with a live session. Sign one out, and YourCA ends the session at once. It does not wait until that device next asks for something.
17. Sign out everywhere else signs out every device except the one you are reading this on.
18. Each session only works from the browser and the phone or computer that made it. If the same sign-in comes from a different browser, YourCA ends it at once.
19. So a session copied from your device is worth nothing to the person who copied it. You are signed out at the same moment, and that is how you find out.
20. One ordinary thing can cause this: Request desktop site on an Android phone. It makes the phone describe itself as a computer. Sign in again with a new code and continue.
21. Notifications sets how often your morning email comes and at what hour. It also sets what YourCA raises with you, kind by kind, and whether this phone shows alerts on its lock screen.
22. Activity is your own log, with a time on each entry. Nobody can edit or delete it, including us.
23. To see everybody on the account and what each person did, go to Activity under Plan in Company admin. Only an office admin can open it.