Click your name at the bottom-left of the dashboard, under the sidebar. Everything there acts on your own login — an employee can change their own password without being able to touch anything about the account.
Password
- At least 10 characters.
- You need your current one, even though you are already signed in. A session that has been lifted from a browser must not be enough to take the login over permanently.
- Other devices already signed in stay signed in. Sign out there too if that matters.
Email address
Changing it takes effect immediately — there is no confirmation link to wait for — so the new address is the one to use at the next sign-in. It also needs your current password. An address another plugwith.me login already uses is refused.
Two-factor authentication (optional)
Two-factor is off by default and entirely your choice. Nothing on plugwith.me requires it, no plan enforces it, and you can turn it off again in the same place. It is worth switching on if your account earns money — a leaked password on its own then stops being enough.
- Open Account → Two-factor authentication → Set up two-factor.
- Scan the QR code with an authenticator app — 1Password, Authy, Google Authenticator, whichever you use. There is a typed key underneath for a device that cannot scan.
- Enter the six-digit code the app shows. That confirms the app and us agree on the clock.
From then on every sign-in asks for a code after the password. The check is enforced by the API, not just by the login form — a password on its own stops being enough anywhere, including for anything talking to us directly.
Lose the phone and you lose the login: there is no recovery code and no email reset. Set the same account up on a second device, or store the typed key in your password manager, before you need it. An account owner can remove and re-create an employee's login; for an owner's own login, write to us from the address on the account.
Frequently asked questions
The code is always rejected.
Almost always a clock problem. Turn on automatic date and time on the phone running the authenticator, then try the next code it shows.
Does the operator console (/admin) support 2FA?
Not yet. It is a separate login system with no factor store. Console staff can change their own password there; a login configured through the environment has to be changed in the deployment settings.