Account security settings protect your user identity across all of Repost, not just one workspace. You manage your password and active sessions from Account Settings → Security. Changes you make here apply to your login credentials and do not affect your workspace membership, role, seat assignment, or billing state.
Account security vs. workspace access#
It helps to keep these two boundaries distinct before making changes.
Your password, email address, and personal API tokens all belong to your user account. Changes here affect how you sign in everywhere.
Roles, seats, invitations, organization tokens, billing, and plan usage belong to the active workspace. These are managed from the Team and Billing pages.
Browser login and personal tokens authenticate as you. Organization tokens authenticate automation for one specific workspace. Rotating tokens does not affect your security settings.
Change your password#
You can update your password at any time from Account Settings as long as you know your current password.
Go to Account Settings, then choose Security.
Enter your current password, then enter and confirm your new password.
If the current password is incorrect, Repost rejects the update and keeps your existing password in place.
If you cannot provide your current password, use the Forgot password? link on the sign-in page to start a password reset.
View and revoke active sessions#
You can review all active sessions associated with your account from Account Settings → Security. Revoking a session signs that device out immediately. Use this if you suspect unauthorized access or if you have lost a device.
Revoking a session does not revoke any API tokens associated with your account. Token credentials are separate from browser session credentials. Go to Account Settings → Tokens to manage or revoke personal API tokens.
API tokens and account security#
API tokens are separate from your login credentials. Rotating a token or revoking all your tokens does not change your password or end any active browser sessions. Likewise, changing your password does not invalidate existing tokens.
Use for your own CLI access across licensed workspaces. Manage and rotate personal tokens from Account Settings → Tokens.
Use for CI/CD and shared automation scoped to one workspace. Manage organization tokens from Organization → API Tokens.
Troubleshoot account security issues#
Password update fails
Re-enter your current password carefully and confirm that the new password matches the confirmation field exactly.
Password reset link is invalid
Request a new reset link from the sign-in page. The reset page requires a valid token in the URL to proceed.
Workspace access is missing after sign-in
A successful login does not guarantee workspace access. If you see a no-license screen or are missing from the team list, check your seat assignment with a workspace owner or admin.