Account Settings
Your name, sign-in email, password, two-factor authentication, passkeys, sessions, devices, notifications, and how to delete the account.
Every control on this page is reached the same way: click your avatar in the top-right corner of any Pulse page, then Settings. That opens on Account → Profile.
A separate Organization Settings entry in the same menu goes somewhere else entirely — Organization → General, your workspace's members and billing. That's Team management and Billing's job, not this page's.
Under Account there are five tabs, in this order: Profile, Security, Devices, Notifications, and Security alerts.
Profile
Two independent things live here: how your name shows up, and the address you sign in with.
Display name
Display name is a plain text field (placeholder "Your name", 100 characters max). Type a new one and a Save changes bar appears at the bottom of the page, Discard beside it. Saving writes straight through — nothing else has to happen first.
Email address
Changing your sign-in email starts from behind a lock, because Pulse never stores a name or email it could actually read — both live only inside a vault encrypted by your password, opened only in your own browser. Locked, the Email address field shows "Encrypted — unlock above, or type a new address" instead of your current one, under a banner reading "Your name and email stay encrypted" with an Unlock button. Unlocking asks for your password and decrypts both fields for this browser only; reload the page and it asks again, unless this device already has your vault key saved — then you'll see "Unlocked on this device" and a Lock link to undo it.
To request the change, type the new address (placeholder you@example.com),
enter Your password, and click Send confirmation link — Cancel
backs out of the form instead. Nothing about the account moves yet. Pulse
mails a confirmation link to the new address, and opening it is what
actually makes the switch; the old address gets a heads-up at the same
moment, with a way to object if you didn't ask for this.
While a link is waiting to be opened, the row becomes an amber-dot ledger —
"Confirmation sent to <address>," "A confirmation link is waiting in your
new inbox," and an expiry countdown — with Cancel request and
Resend link underneath it.
Note
If sending the confirmation email gets throttled, Pulse's guidance is just to wait a minute and try again — no specific window or attempt count is shown anywhere in the product. The same message can turn up wherever Pulse asks you to prove your password live, including the confirmation step below when you delete your account.
Deleting your account
The Danger Zone sits at the bottom of this tab, not on a tab of its own. Click Delete and a confirmation panel expands in place, spelling out what you're about to lose before it asks you for anything.
Warning
Deleting your account cannot be undone. It destroys your entire Ciphera ID: every active session and trusted device, your membership in every organisation you belong to, and (for any workspace you solely own) that workspace itself, once you explicitly agree to take it with you: its sites, everything they've collected, and its subscription.
A workspace with another admin in it is never pulled in this way. Deletion is blocked until ownership is transferred or the workspace is deleted on its own — see Team management for that.
On the identity side this is a real point of no return: the account row is deleted and its sensitive columns are cryptographically scrubbed. The same pass erases your organisation memberships, your notification preferences and history, and any plaintext email reference Pulse itself held, then removes your address from the mail system.
Confirming needs Your password — a fresh, live check against your real password, proved on the spot; a wrong one fails with no deletion and nothing issued — plus typing the literal word DELETE into a second field. Delete account stays disabled until both are right.
If you solely own a workspace, the panel lists each one by name, site count, domains, and subscription plan before letting you continue, and the server checks that same list again at the moment of deletion — a workspace you create after opening the panel is refused rather than swept in quietly.
Security
This tab holds five things, top to bottom: two-factor authentication, recovery codes, passkeys, your password, and active sessions. Pulse adds a sixth card of its own underneath all of it: account recovery.
Two-factor authentication
Enable 2FA shows a QR code, the same secret spelled out for manual entry, and a field for the 6-digit code your authenticator produces — enter one correctly and it's on. Disable 2FA asks for your password and a live code; a recovery code works in place of the code if you no longer have the authenticator.
Warning
Turning 2FA off removes it from every future sign-in, immediately. It's reversible — enabling it again issues a fresh secret and a fresh set of recovery codes — but until you do, sign-in checks your password alone.
Recovery codes
Regenerate Codes replaces the one-time codes that stand in for your authenticator when you don't have it to hand. The dialog says plainly what it's about to do, and asks for your password plus a live authenticator code.
Warning
Regenerating recovery codes invalidates every code you already hold, the instant the new set exists. There's no getting the old ones back — only the new list works from then on.
Passkeys
Add passkey enrols a hardware key, your phone, or your OS's own passkey store. An account holds one at most — a second is refused outright. Each enrolled passkey gets its own Rename and Remove.
Warning
Removing your passkey removes passwordless sign-in until you add another. Because the cap is one, taking out your only passkey isn't a pause — a new one afterward is a fresh enrollment, not a restore of what you removed. The click itself asks for nothing further: no password, no 2FA step.
Password
Update Password takes Current Password, New Password, and Confirm New Password. Pulse says outright what happens next: changing your password "signs you out of every device, including this one."
Warning
A password change revokes every session on the account the moment it succeeds — the one you used to submit the form included. You land back at sign-in and log in again with the new password; the sign-out itself can't be undone.
Active sessions
Every session on the account is listed here: a device or browser description Pulse computes server-side, when it signed in, when it expires, and a Current Session badge on the one you're using right now. Every other row carries a Revoke button.
Warning
Revoking a session signs that device out immediately. Nothing else on the account is touched, and the device can simply sign in again — there's no dialog beyond the click itself.
Note
Ciphera ID issues sessions for more than Pulse — id.ciphera.net is a separate app on the same account. This list doesn't say which app issued a given session, so whether one from another Ciphera product would show up here alongside your Pulse sessions isn't something the interface tells you either way.
Account recovery
This card is Pulse's own, sitting below the Security tab's other rows. A 24-word recovery phrase is the only way back into a zero-knowledge account if you forget your password — Ciphera has nothing to reset, because it never held anything a reset could use.
Set up recovery (or Replace phrase, once one already exists) opens a dialog titled Set up account recovery, asking for your Sign-in email and Password. Submit and Pulse shows the 24 words exactly once, with a checkbox confirming you've saved them before Create my recovery phrase goes through.
Warning
Setting up a recovery phrase immediately invalidates any earlier one. There's no going back to a phrase you've replaced — write the new one down before you confirm, because the screen showing it doesn't come back.
Redeeming a phrase — actually regaining access once you've forgotten your
password — happens at id.ciphera.net/recover, signed out, outside Pulse
entirely. You can't reach Pulse Settings if you can't sign in, so that flow
isn't covered here.
Devices
Two lists live on this tab, and neither is the Active sessions list above — a device being "trusted" and a device being "signed in" are different facts.
Trusted devices
Pulse recognises a device by an IP-derived fingerprint the first time it signs in and verifies, and lists it here with First seen and Last seen dates. The device you're using right now can't be removed from this list.
Warning
Removing a trusted device doesn't end any session. All it does is forget that the device was seen before — its next sign-in will trigger a new-device security alert email, the same as any device Pulse has never met. Nothing is lost that a normal sign-in doesn't put back: the device is simply trusted again once it verifies.
The confirm dialog says exactly that: "Remove device" / "A new sign-in from this device will trigger a security alert."
Security activity
A read-only, paginated log of security events on the account — Event, Details, When — grouped by day, with Load more underneath. Sign-ins, failed sign-ins, password changes, 2FA turned on or off, recovery codes regenerated, and the account being deleted all show up here. There's nothing to configure on this list; it's a record, not a setting.
Notifications
This tab is Pulse's own in-app-and-email notification system — a different thing from Security alerts next to it, which belongs to Ciphera ID. Notification Preferences covers the seven categories, the three delivery switches, and muting in full; this page only adds what that one doesn't.
Schedule
One daily digest time and timezone apply across every category, and one quiet hours window holds email until it ends rather than dropping it. Billing and Security ignore both and send immediately regardless, the same way they ignore muting.
Retention
Each category keeps its own notifications for a number of days you can raise or lower, within a floor and a default the category sets. This is separate from your site's own event data retention, which is a different setting entirely.
Purging
Purge all N notifications, in the tab's danger section, deletes every
notification stored against the account, across every category, in one go.
Warning
Purging is permanent. The count named in the button is exactly what disappears. The record that something was sent isn't touched — only the notification items themselves go, so purging looks nothing like turning off delivery.
Security alerts
A small, separate surface: three toggles for the account-level emails Ciphera ID itself sends, distinct from everything on the Notifications tab above.
| Toggle | Sends when |
|---|---|
| Login activity | Sign-ins from a new device |
| Password changes | Password changes, and the session revocations that follow them |
| Two-factor authentication | Two-factor is turned on or off, or your recovery codes change |
All three default on — this is an opt-out list, not an opt-in one.
A fourth alert has no toggle at all: Blocked sign-in attempts shows as a read-only row with an Always sent chip, because Ciphera ID fires it unconditionally, with no per-user setting standing in the way.