Account settings and two-factor authentication

Account settings are about you, not your company. Your name, email, password, and security settings follow you into every workspace you belong to. Think of your account as your ID badge and each workspace as an office building it opens.

Where to find it: select your name at the bottom of the sidebar, then choose Account settings.

The page has seven sections, from top to bottom: Profile, Email address, Sign-in methods, Phone number, Two-factor authentication, Active sessions, and Danger zone.

Update your profile

Your name and picture are what teammates see across Hourzero, for example in the members list.

1. Under Profile, select Upload picture (or Change picture if you already have one).
2. Choose a JPG, PNG, or WebP image up to 5 MB. The picture updates right away.
3. Edit Name if needed.
4. Select Save profile. The button only becomes active after you change your name.

To go back to your initials, select Remove next to your picture.

Change your email address

You use this email to sign in, so Hourzero checks the new address before switching.

1. Under Email address, type the new address in New email address.
2. Select Send code. Hourzero emails a code to the new address.
3. Enter the code from that email.
4. Select Verify email. You see Email address updated, and you sign in with the new address from now on.

Manage how you sign in

The Sign-in methods section shows each way you can get into your account, with a badge such as Enabled, Not set, Connected, or Not connected.

Change or create a password

1. Under Sign-in methods, select Change password. If you've only ever signed in with Google, the button says Create password instead.
2. If you're changing a password, enter your Current password.
3. Enter a New password between 8 and 128 characters, then type it again in Confirm password.
4. Leave Sign out every other device after changing the password. ticked if you want to be sure nobody else stays signed in.
5. Select Change password (or Create password).

Hourzero checks new passwords against lists of passwords exposed in past data breaches and rejects ones that appear there. The check uses a short, scrambled code made from your password, never the password itself.

Connect or disconnect Google

• To sign in with your Google account, select Connect next to Google and follow Google's steps.
• To stop using Google, select Disconnect.

If the Google row says Google sign-in isn't configured, it isn't available on your Hourzero setup and there's nothing to connect.

Add a phone number

Adding a verified phone number is optional.

1. Under Phone number, select your country code from the list. You can search by country name or code.
2. Type your number.
3. Select Send code. Hourzero texts you a code.
4. Enter the code and select Verify number. A Verified badge appears.

To replace it later, type a new number and select Change number. To delete it, select Remove.

If the section says phone verification isn't available yet, it hasn't been set up for your Hourzero installation, and you can skip it.

Turn on two-factor authentication

Two-factor authentication (2FA) adds a second lock to your account. After you enter your password, Hourzero also asks for a short code from an app on your phone. Someone who steals your password still can't get in without your phone.

1. 1PasswordSign in with your email and password as usual.
2. 2CodeOpen your authenticator app and type the current code.
3. 3Signed inTick Trust this device to skip the code here for 30 days.

You need an authenticator app, such as 1Password, Google Authenticator, or Authy.

1. Under Two-factor authentication, select Enable 2FA. The Set up an authenticator app window opens.
2. If you have a password, type it in Confirm your password.
3. Select Continue. A QR code appears.
4. Open your authenticator app, add a new account, and scan the QR code. The app starts showing a code for Hourzero.
5. Under Backup codes, select Copy codes and save them somewhere safe, away from your phone. A password manager or a printed sheet in a drawer both work.
6. Type the current code from your app in Authenticator code.
7. Select Verify and enable. You see Two-factor authentication enabled.
8. Select I saved my codes to close the window.

The Authenticator app row now shows Enabled.

2FA protects sign-ins with your email and password. If you sign in with Google, your Google account's own security settings protect that sign-in.

Sign in with two-factor authentication

1. Sign in with your email and password.
2. On the Two-factor authentication page, enter the code from your authenticator app in Authenticator code.
3. Keep Trust this device for 30 days ticked on your own computer. Untick it on a shared or public computer.
4. Select Verify.

Use a backup code

If you don't have your phone, select Use a backup code on the Two-factor authentication page and type one of your saved codes. Each backup code works only once, so cross it off after you use it.

Get new backup codes

Hourzero can't show your old backup codes again. If you've used most of them or lost the list, create a fresh set.

1. Under Two-factor authentication, select Backup codes.
2. Type your password in Confirm your password, if asked.
3. Select Generate codes. The new codes appear.
4. Select Copy codes, save them, then select Done.

Turn off two-factor authentication

1. Under Two-factor authentication, select Disable.
2. Type your password in Confirm your password, if asked.
3. Select Disable 2FA. Password sign-ins no longer ask for a code.

Sign out other devices

Active sessions lists every browser and device signed in to your account, such as "Chrome on macOS", with when it was last active. Your current browser has a This device badge.

• To sign out one device, select End session next to it.
• To sign out everywhere except here, select End other sessions at the top of the section.

Ending a session only signs that device out. It doesn't change your password or delete anything.

Delete your account

Deleting your account is permanent. It removes your account, your personal workspace with all its agents, and your personal data. Team workspaces you belong to stay in place for everyone else.

Before you start:

• Hand over any team workspace you own alone. If you're the only owner of a team workspace, make someone else the owner or delete that workspace first. Otherwise Hourzero stops you with a message like "Transfer ownership or delete Acme before deleting your account." See Members and invitations.
• Cancel any paid plan on your personal workspace under Workspace Settings → Billing.

To delete your account:

1. Under Danger zone, select Delete account.
2. In the Delete account permanently window, type your email address exactly as shown.
3. Enter your Password, if you have one.
4. Select Delete account. Hourzero signs you out and takes you to the sign-in page.

If you only want to stop working in one team workspace, open Workspace Settings → Members in that workspace and choose Leave workspace from the menu on your own row. Your account stays as it is.

Common questions

I changed workspaces. Do I need to set up 2FA again?

No. 2FA, your password, and your profile belong to your account, so they apply in every workspace.

My authenticator code is rejected. What should I check?

Make sure you're using the Hourzero entry in your app and typing the code currently shown, not one that has expired. Check that your phone's clock is set to update automatically. If it still fails, use a backup code.

Can I see my backup codes again?

No. Generate a new set under Two-factor authentication → Backup codes. The old set stops working.

How do employees sign in with our company account?

That's single sign-on, which a workspace admin sets up for the whole company. See Single sign-on.

Next steps