Your Profile, Password and Account Security in Autovella

How do I update my Autovella profile?

Click your avatar in the top bar and choose Profile. The My Profile page opens with a Personal Information card showing your First Name, Last Name, Email, Username, Phone, Date of Birth and Joining Date.

1. Click Edit on the Personal Information card. The Edit My Profile window opens.
2. Change your first name, last name, phone or date of birth. First and last name are required.
3. Save. A Profile updated message confirms it.

To change your photo, click the small camera icon on your avatar and choose an image (up to 5 MB). Use the remove icon to go back to your initials. Your username, role and joining date are managed by an administrator. See Managing Users and Company Settings.

The same page lists Access & Permissions: your role and which pages and feature permissions you have. It is read-only. To request more access, contact your admin. See How Access Works.

How do I set my timezone and landing page?

Two preference cards sit in the right column of the Profile page.

• Default Landing Tab: choose which section you land on after signing in or when you open the home page. Pick one from the list and click Save. Leave it on Role default to use the standard landing page for your role.
• Timezone: dates and times across Autovella are shown in this timezone. It is detected from your browser on first login. Until you pick one yourself, your organization's default from Company Information applies. Choose a timezone and click Save.

Set your own timezone if you travel or work remotely, so due dates, time entries and calendar items match your local clock.

How do I change my password?

1. Open Profile and find the Change Password card.
2. Enter your Current Password, then your New Password and Confirm New Password.
3. Click Update Password.

A new password must be 12 to 128 characters. Autovella also rejects very common passwords and passwords that appear in known data breaches. Use a passphrase of several words and a different password from other sites.

Changing your password invalidates your existing sign-in sessions, so you may be asked to sign in again on your devices.

What if I forgot my password or my account is locked?

Reset a forgotten password

1. On the sign-in page click Forgot password?.
2. Enter your Username or email and click Send reset link.
3. Open the email titled Reset your password and click Reset password. The link works for 1 hour.
4. Enter and confirm a new password of at least 12 characters, then Reset password, and sign in.

For privacy, Autovella always shows the same confirmation message whether or not the account exists ("If an account exists for that identifier, a reset link has been sent"), and only active accounts receive a link. If your email address is shared by several accounts, you receive one email per account. If you see Invalid reset link or "Reset link is invalid or expired", request a new one. A successful reset signs out existing sessions and also clears any lockout.

No email arriving? Check spam, confirm you used the right username or email, and ask your admin to confirm the account is Active.

Locked out after failed sign-ins

Five wrong passwords in a row lock the account for 15 minutes. A correct sign-in or a password reset clears the counter. An admin can unlock you immediately from Settings, Users & Access, Users using the Unlock button on your row, or Unlock account on your user page.

What are auto-logout, login history and login access?

• Auto-logout: your admin sets an inactivity limit (default 30 minutes, anywhere from 5 minutes to 24 hours) under Company Information. You get a warning two minutes before you are signed out, and active use never triggers it. Save your work when the warning appears.
• Login history: your user page shows your last 10 successful sign-ins with the browser used, visible to you and to admins. If you see one you do not recognise, change your password straight away.
• Operator Login Access: on the Profile page you can allow an Autovella support operator to sign in as you to investigate an issue. Choose Grant for 1 day, Grant for 7 days or Grant for 30 days. It expires automatically, and Revoke access ends it at any time. It is off by default (Not granted).
• API-only accounts: admins can mark service accounts as API-only so they cannot sign in with a password at all. See Using the Autovella API.
• Access tokens for Claude: the MCP card on your Profile creates personal tokens that act as you, with read-only access by default. See Connecting Claude to Autovella. Customer users do not see this card.

Account security tips

• Use a long unique passphrase and change it if you suspect it was exposed
• Never share your login; ask an admin to create a user for each person
• Revoke operator login access and unused access tokens when you no longer need them
• Sign out on shared computers instead of relying on the inactivity timer
• Admins: deactivate users who leave, which signs them out immediately

Autovella's Profile page does not offer a two-factor authentication setting for regular users at the moment. For problems not covered here, visit Support.

Frequently asked questions

Related reading