Account security vs. workspace access
It helps to keep these two boundaries distinct before making changes.Account (your identity)
Your password, email address, and personal API tokens all belong to your user account. Changes here affect how you sign in everywhere.
Workspace (organization access)
Roles, seats, invitations, organization tokens, billing, and plan usage belong to the active workspace. These are managed from the Team and Billing pages.
CLI (credential use)
Browser login and personal tokens authenticate as you. Organization tokens authenticate automation for one specific workspace. Rotating tokens does not affect your security settings.
Change your password
You can update your password at any time from Account Settings as long as you know your current password.1
Open Security settings
Go to Account Settings, then choose Security.
2
Click Change Password
Enter your current password, then enter and confirm your new password.
3
Save the change
If the current password is incorrect, Repost rejects the update and keeps your existing password in place.
If you cannot provide your current password, use the Forgot password? link on the sign-in page to start a password reset.
View and revoke active sessions
You can review all active sessions associated with your account from Account Settings → Security. Revoking a session signs that device out immediately. Use this if you suspect unauthorized access or if you have lost a device.API tokens and account security
API tokens are separate from your login credentials. Rotating a token or revoking all your tokens does not change your password or end any active browser sessions. Likewise, changing your password does not invalidate existing tokens.Personal tokens
Use for your own CLI access across licensed workspaces. Manage and rotate personal tokens from Account Settings → Tokens.
Organization tokens
Use for CI/CD and shared automation scoped to one workspace. Manage organization tokens from Organization → API Tokens.
Troubleshoot account security issues
Password update fails
Password update fails
Re-enter your current password carefully and confirm that the new password matches the confirmation field exactly.
Password reset link is invalid
Password reset link is invalid
Request a new reset link from the sign-in page. The reset page requires a valid token in the URL to proceed.
Workspace access is missing after sign-in
Workspace access is missing after sign-in
A successful login does not guarantee workspace access. If you see a no-license screen or are missing from the team list, check your seat assignment with a workspace owner or admin.