Profile
Manage your personal account information, appearance, notification preferences, and security settings.
Overview
The Profile page lets you:
- Update your display name and upload or remove your avatar
- Change your password
- Choose your theme (light, dark, or system)
- Configure which notifications you receive, both in-app and by email
- Enable multi-factor authentication with an authenticator app (TOTP) or security keys / passkeys (WebAuthn)
- Review your recent activity history
Navigate to Profile
Click your avatar in the top-right corner of the app, then choose Profile from the menu. The page is served at /profile. The legacy /settings/profile URL redirects here automatically.
Account information
The Account card shows your name, email, your current organization and role, and (if applicable) your platform role.
| Field | Editable | Notes |
|---|---|---|
| Name | Yes | Your display name. Click the pencil icon, edit the field, then click Save. |
| No | Your login email. Shown read-only — "Email cannot be changed" appears in the editor. | |
| Organization & role | No | Your current organization name and your role within it. |
| Platform Role | No | Shown only if you hold a platform-level role. |
To update your name:
- In the Account card, click the pencil icon.
- Edit the Name field.
- Click Save.
Profile picture
The Profile Picture card shows your avatar (or your initials if no image is set).
- Click Upload and choose an image file.
- To remove an existing avatar, click Remove.
Accepted formats are JPG, PNG, GIF, or WebP, up to 5 MB.
Password
Change your password from the Password card:
- Click the lock icon to open the change-password form.
- Enter your Current Password.
- Enter and confirm your New Password.
- Click Change Password.
Your new password must meet these requirements:
- At least 8 characters
- At least one uppercase letter
- At least one lowercase letter
- At least one number
Theme
The Theme card lets you choose how the app looks. Pick Light, Dark, or System (which follows your operating system setting). Your choice is also available from the Theme submenu in the top-right user menu.
Notifications
The Notifications card controls which events generate a notification and how you receive it.
- The Email Notifications master toggle turns all notification emails on or off. When it is off, the per-type Email switches are disabled.
- Each notification type has separate In-App and Email switches.
- Notification types are organized into collapsible categories — expand a category to see its types.
- Changes save automatically a moment after you toggle a switch.
The available categories are:
| Category | Examples of notification types |
|---|---|
| Tickets | Ticket Created, Ticket Assigned, Ticket Reply, Ticket Mention, Status Changed, Ticket Resolved |
| Invoices | Invoice Created, Invoice Sent, Invoice Paid, Invoice Overdue, Invoice Refunded, Invoice Disputed |
| Quotes | Quote Created, Quote Sent, Quote Accepted, Quote Rejected |
| Contracts & Expirations | Contract Expiring/Expired, Domain Expiring, Certificate Expiring, Warranty Expiring, License Expiring |
| Projects & Tasks | Project Created/Assigned/Completed, Task Assigned, Task Completed |
| Time Off | Time Off Requested, Approved, Denied |
| Checklists | Item Assigned, Item Due Soon, Checklist Completed |
| Other | Mentions, System Alerts |
Email deliverability banner
If notification emails cannot currently be sent, a banner appears at the top of the Notifications card explaining why. The banner only shows when there is a problem — a healthy setup stays silent. The message depends on the cause:
| Cause | What the banner says |
|---|---|
| Your email notifications are turned off | Prompts you to turn on the Email Notifications toggle above. |
| Your organization has not configured an email provider | "An admin needs to finish SMTP or Microsoft 365 setup in Settings → Email." |
| Your account has no email address on file | Asks you to add an email address to your profile. |
| The notification email template is missing | Asks an admin to re-seed system email templates from Settings → Email Templates; Ascent also attempts to auto-heal this on the next notification. |
| Your organization record could not be loaded | Suggests signing out and back in to refresh a stale session. |
Multi-Factor Authentication
The Multi-Factor Authentication card lets you secure your account with a second factor. Two methods are supported.
Authenticator app (TOTP)
A status badge shows whether the authenticator app is Enabled or Disabled. This status reflects your authenticator app only — it is tracked separately from your security keys, so registering a passkey does not show the authenticator app as Enabled, and removing your authenticator app does not affect your security keys.
To enable:
- Click Enable.
- Scan the displayed QR code with an authenticator app such as Google Authenticator or Authy. If you cannot scan, enter the displayed secret key manually.
- Enter the 6-digit code from your app and click Verify.
To disable, click Disable and enter your password when prompted.
Security keys and passkeys (WebAuthn)
Use a hardware security key (FIDO2) or a platform passkey/biometric. The badge shows how many keys are registered.
- Click Add Key.
- Follow your browser and device prompts to create the credential.
- Enter a name for the key when prompted.
Each registered key is listed with the date it was added and, where available, when it was last used. Click the trash icon next to a key to remove it.
Activity History
The Activity History card lists your most recent account actions. Each entry shows the action, the affected entity (where applicable), the timestamp, and the IP address it came from. Click the refresh icon to reload the list. The view shows your most recent activity; a count indicates if there are more entries beyond those displayed.
Tips
- Enable MFA — turn on an authenticator app or register a security key to protect your account.
- Tune notifications — keep the In-App switches on for things you act on, and reserve Email for items you want pushed to your inbox.
- Review activity — scan the Activity History periodically and check the IP addresses for anything unexpected.