Account, plans & billing

Your account, profile and two-factor authentication

3 min read Updated 05 Jul 2026

Account settings is where you manage what's yours: your name and email, the emails the product sends you, your password, replays of one-time guided tours, and two-factor authentication — including authenticator-app setup and the trusted devices that skip the sign-in challenge. Open it from the avatar menu, top right.

Account settings covers what's yours alone — profile details, email preferences, your password, guided-tour replays and two-factor sign-in. Open it from the avatar menu in the top-right corner and choose Account.

Organisation-wide settings — plans, security policy, defaults — live elsewhere; this page is only about your own account.

Update your profile details

  1. In the Profile card, edit First name, Last name or Email.
  2. Tick or untick Send me occasional product updates from ControlStandard.Tools. if you want to change your marketing preference.
  3. Press Save profile.

You'll see a "Profile saved." confirmation. If you changed your email, a verification link goes to the new address — follow it to re-verify.

Choose which emails you receive

Under Email preferences in the same Profile card:

  1. Tick Pause coaching nudges to stop all coaching emails, including ones for dates you set yourself. The same prompts still appear on screen.
  2. Tick Pause onboarding reminders to stop the reminders to set your learning plan. If your organisation requires these reminders until your learning plan is set, this box is greyed out and can't be changed.
  3. Press Save profile.

Change your password

  1. In the Password card, enter your Current password.
  2. Enter a New password (at least 8 characters) and Confirm new password.
  3. Press Update password.

Any trusted devices are signed out at the same time, so you'll answer the two-factor challenge on your next sign-in.

Replay a guided tour

One-time walkthroughs — the Welcome tour and the Ownership explainer — are listed under Guided tours & tips with the date you saw them.

  1. Untick the guide you want to see again and press Save tour settings.
  2. Visit the relevant page; the guide shows once more.

For the welcome tour there's a shortcut: choose Replay tour from the avatar menu and it reopens on your dashboard immediately.

Set up an authenticator app

The Two-factor authentication card reflects your organisation's policy. When the policy allows authenticator apps and you haven't enrolled one, you sign in with email codes by default — enrolling an app is faster.

  1. Press Set up authenticator app, then Start authenticator setup.
  2. Scan the QR code with your authenticator app (Google Authenticator, 1Password, Authy and similar all work), or type the secret key under Manual entry if you can't scan.
  3. Enter the 6-digit code your app shows and press Activate authenticator app.

You'll see "Authenticator app activated." and use the app at your next sign-in. Codes are time-based, so check your device's clock if a code is rejected. To remove the app later, press Remove authenticator app, confirm your Current password, and sign-in falls back to email codes.

Manage trusted devices

At the two-factor challenge you can tick Remember this device for 30 days. Remembered devices appear under Trusted devices on the Account page, with when they were last seen and when they expire.

  1. Press Revoke next to a device to remove it, or Sign out of all trusted devices to clear the list.

Revoked devices answer the full two-factor challenge at their next sign-in.

Who can do this

Everyone, on every plan — these settings are personal to your account. The two-factor policy itself (off, email codes, or email and authenticator apps) is set for the whole organisation by someone with permission to manage organisation settings.

Frequently asked

I've lost the device with my authenticator app. Am I locked out?
No. On the sign-in code screen, press Use email code instead and a 6-digit code goes to your email — it expires in 10 minutes, with a Resend the code link if it doesn't arrive. Once you're in, open Account, press Remove authenticator app and re-enrol on your new device — if email codes fail too, contact support@thecontrolstandard.com.
Can I change my email address?
Yes — edit Email in the Profile card and press Save profile. We send a verification link to the new address, and the change is rejected if another account already uses that email.
Does removing my authenticator app turn off two-factor sign-in?
No. Your organisation's security policy decides whether two-factor is required. Removing the app just means you'll receive 6-digit codes by email at sign-in instead — and all trusted devices are signed out.
Why can't I see the `Set up authenticator app` button?
Authenticator apps are only offered when your organisation's policy is set to email or authenticator app. If the policy is off or email-only, the button doesn't appear — an admin can change this on the organisation settings page.

Related guides