> ## Documentation Index
> Fetch the complete documentation index at: https://docs.upcorda.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage Your Doohick Account Settings

> Update your profile, strengthen your security with 2FA, manage API keys, transfer workspace ownership, and safely delete your Doohick account.

Your Doohick account settings give you control over every aspect of your presence on the platform — from the name and avatar your teammates see to the API keys your applications use and the security measures that protect your workspace. This guide walks through each settings area in the order you're most likely to need them.

## Updating your profile

Keep your profile information current so teammates can identify you and so timestamps and exports reflect your correct timezone.

Navigate to **Settings → Profile** to update any of the following fields:

* **Full name** — displayed throughout the Doohick interface and in email notifications.
* **Email address** — used for login, notifications, and billing receipts.
* **Avatar** — upload a square image (PNG or JPEG, minimum 200 × 200 px) to personalize your account.
* **Timezone** — controls how all timestamps in the dashboard and exports are displayed for your session.

<Warning>
  Changing your email address triggers a verification message to the *new* address. Your login email does not update until you click the confirmation link. Until then, you must continue signing in with your original address.
</Warning>

## Password and security

Protecting your Doohick account requires more than a strong password. Use the tools below to build a layered security posture.

**Change your password**
Go to **Settings → Security → Password**. Enter your current password, then enter and confirm the new one. Doohick enforces a minimum of 12 characters and requires a mix of letters, numbers, and symbols.

**Enable two-factor authentication (2FA)**
Navigate to **Settings → Security → Two-Factor Authentication** and click **Enable 2FA**. Doohick supports TOTP (Time-based One-Time Password) via any authenticator app such as Google Authenticator, Authy, or 1Password. Scan the QR code displayed on screen, enter the six-digit code from your app to confirm setup, and save your one-time backup codes in a secure location.

**Manage active sessions**
Under **Settings → Security → Active Sessions**, you can see every device and browser currently logged in to your account, including the location, device type, and last active timestamp. Click **Revoke** next to any session you don't recognize to immediately sign out that device.

## API key management

API keys authenticate your applications and scripts when they call the Doohick REST API. Create and manage all keys from **Settings → API Keys**.

<Steps>
  <Step title="Create a new API key">
    Click **New API Key**, enter a descriptive label, and select an expiry period (or choose **No expiry** for long-lived service keys). Click **Generate**. Copy the key immediately — Doohick only displays the full key once.
  </Step>

  <Step title="Use the key in your application">
    Include the key in the `Authorization` header of every API request:

    ```http theme={null}
    Authorization: Bearer dh_live_XXXXXXXXXXXXXXXXXXXX
    ```
  </Step>

  <Step title="Revoke a key when it's no longer needed">
    Click **Revoke** next to any key in the list. Revocation is immediate — any application using that key will receive `401 Unauthorized` responses.
  </Step>
</Steps>

Use a consistent naming pattern to make keys easy to identify at a glance. The recommended convention is:

```text theme={null}
dh_live_production_team_abc123
dh_live_staging_backend_xyz789
```

This pattern encodes the environment (`production` / `staging`) and the context (`team` / `backend`) directly in the key label, so you always know where a key is being used without opening your codebase.

<Note>
  Never commit API keys to version control. Use environment variables or a secrets manager to inject keys into your applications at runtime.
</Note>

## Transferring workspace ownership

Each Doohick workspace has exactly one **Owner**. If you need to hand off ownership — for example, when leaving an organization — transfer the Owner role to another team member before leaving.

<Steps>
  <Step title="Open Team settings">
    Navigate to **Settings → Team** and locate the member you want to designate as the new Owner.
  </Step>

  <Step title="Reassign the Owner role">
    Click **⋯** next to that member's name and select **Assign as Owner**. A confirmation dialog explains that your role will be downgraded to **Admin**.
  </Step>

  <Step title="Confirm the transfer">
    Click **Transfer Ownership** in the confirmation dialog. The change takes effect immediately. The new Owner receives an email notification.
  </Step>
</Steps>

## Deleting your account

<Warning>
  Deleting your account permanently removes all your personal data, owned workspaces, and associated resources from Doohick. This action cannot be undone. Before proceeding, transfer ownership of any workspaces you own and export any data you need to retain.
</Warning>

<Steps>
  <Step title="Navigate to Account deletion">
    Go to **Settings → Account** and scroll to the **Danger Zone** section at the bottom of the page. Click **Delete Account**.
  </Step>

  <Step title="Review the deletion warning">
    Read the list of data that will be permanently deleted, including your profile, workspaces you own, and all associated resources and history.
  </Step>

  <Step title="Confirm by typing your workspace name">
    Type the name of your primary workspace exactly as shown to unlock the deletion button. This step prevents accidental deletions.
  </Step>

  <Step title="Submit the deletion request">
    Click **Permanently Delete Account**. Doohick will send a final confirmation email and begin the deletion process within 24 hours.
  </Step>
</Steps>

<Note>
  Doohick retains workspace data for 30 days after an account deletion request is submitted, during which time you can cancel the deletion by contacting support. After 30 days, all data is purged from Doohick's systems with no possibility of recovery. If you want a copy of your data before deletion, go to **Settings → Account → Export Data** to download a full archive of your workspace content in JSON format.
</Note>