Accounts and teams

Account

Everything a user needs to manage their own account. Sensitive changes are confirmed by email, and an address another account uses is ignored to avoid enumeration.

What you get

• Rename and change email, confirmed from the current address first
• Active sessions with device, IP and time, with revoke and sign out of all others
• Change password, or request a link to set one for passwordless users
• Account deletion by email confirmation, which cascades and writes an audit entry

Turn it on

• Works out of the box. Email confirmations need an email provider in production

Where it lives

• app/(dashboard)/settings