# Account and security (/docs/en/get-started/account-and-security)



Your account belongs to you and works across practices. Open your name at the bottom of the sidebar and choose **Settings**. The page has four tabs: **Profile**, **Security**, **Notifications** and **Preferences**. Practice-wide rules, such as requiring two-factor for everyone, are set by the owner in **Organization → Settings**. See [Data and compliance](/docs/en/guides/data-and-compliance).

## Set your profile and preferences [#profile]

In **Profile**, change your picture and your first and last name. Your email address is shown with its verification status. The name you enter is the name colleagues see.

In **Preferences**, choose a theme (**Light**, **Dark** or **System**), your language, and whether single-key shortcuts are on. **Data residency** shows where your account data is stored. Your language applies to you only. See [Countries and languages](/docs/en/get-started/countries-and-languages#interface).

**Notifications** controls which notifications reach you. The Agent has its own page, reached from the link **Agent settings** in the same sidebar. See [Agent settings](/docs/en/guides/agent-settings).

## Turn on two-factor protection [#two-factor]

Two-factor adds a code from an authenticator app to your sign-in. Do it before you work with patient data.

1. Open **Security** and choose **Enable 2FA** under **Two-factor authentication**. Enter your current password if asked.
2. Scan the QR code with your authenticator app, or enter the secret shown. Enter the 6-digit code to confirm.
3. On **Save your recovery codes**, choose **Copy codes** or **Download codes** and store them somewhere safe. Each code works once if you lose access to your authenticator.

If your practice requires an authenticator app, you see **Two-factor authentication required** until you finish. The requirement counts as met only for a session verified with an authenticator or recovery code. If you are asked to verify, enter a current code or a recovery code.

## Change your password and passkeys [#password]

Under **Security**, choose **Change password**, enter your current password and a new one, and choose **Update password**. This signs out your other sessions. If your account has no password, for example when you sign in through your practice's single sign-on or Google, choose **Set password**. Salisan emails a 6-digit code to confirm it is you.

Choose **Add passkey** to sign in with your device's biometrics or a security key, and **Remove** to delete one. **Connected accounts** lists the sign-in methods linked to your account.

## Review where you are signed in [#sessions]

**Sessions** lists the devices that are signed in, with the date each one signed in. Choose **Revoke** next to a session you do not recognise, or **Revoke other sessions** to sign out everywhere except this device. Choose **Sign out** to end the current session. Sign out after using a shared computer.

## Download or close your account [#close-account]

Under **Close account**, **Download JSON** exports your personal profile, preferences, security metadata and support history. It does not include organization records.

<Callout type="warn">
  Deleting your account is permanent. Leave every practice, or transfer ownership, before you choose **Delete account**. Salisan asks you to confirm in the dialog and by email.
</Callout>

Closing your personal account is separate from offboarding a practice, which is under **Organization → Compliance**. See [Data and compliance](/docs/en/guides/data-and-compliance).

If you cannot sign in, see [I can't sign in](/docs/en/troubleshooting/cant-sign-in) and [Two-factor problems](/docs/en/troubleshooting/two-factor-problems).