> ## Documentation Index
> Fetch the complete documentation index at: https://repost.sh/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage Repost Account Security, Passwords, and Sessions

> Update your password, review active sessions, and manage personal API tokens for your Repost account from the Account Settings security page.

Account security settings protect your user identity across all of Repost, not just one workspace. You manage your password and active sessions from **Account Settings → Security**. Changes you make here apply to your login credentials and do not affect your workspace membership, role, seat assignment, or billing state.

## Account security vs. workspace access

It helps to keep these two boundaries distinct before making changes.

<CardGroup cols={3}>
  <Card title="Account (your identity)" icon="user-round">
    Your password, email address, and personal API tokens all belong to your user account. Changes here affect how you sign in everywhere.
  </Card>

  <Card title="Workspace (organization access)" icon="building-2">
    Roles, seats, invitations, organization tokens, billing, and plan usage belong to the active workspace. These are managed from the Team and Billing pages.
  </Card>

  <Card title="CLI (credential use)" icon="terminal">
    Browser login and personal tokens authenticate as you. Organization tokens authenticate automation for one specific workspace. Rotating tokens does not affect your security settings.
  </Card>
</CardGroup>

## Change your password

You can update your password at any time from Account Settings as long as you know your current password.

<Steps>
  <Step title="Open Security settings">
    Go to **Account Settings**, then choose **Security**.
  </Step>

  <Step title="Click Change Password">
    Enter your current password, then enter and confirm your new password.
  </Step>

  <Step title="Save the change">
    If the current password is incorrect, Repost rejects the update and keeps your existing password in place.
  </Step>
</Steps>

<Note>
  If you cannot provide your current password, use the **Forgot password?** link on the sign-in page to start a password reset.
</Note>

## View and revoke active sessions

You can review all active sessions associated with your account from **Account Settings → Security**. Revoking a session signs that device out immediately. Use this if you suspect unauthorized access or if you have lost a device.

<Warning>
  Revoking a session does not revoke any API tokens associated with your account. Token credentials are separate from browser session credentials. Go to **Account Settings → Tokens** to manage or revoke personal API tokens.
</Warning>

## API tokens and account security

API tokens are separate from your login credentials. Rotating a token or revoking all your tokens does not change your password or end any active browser sessions. Likewise, changing your password does not invalidate existing tokens.

<CardGroup cols={2}>
  <Card title="Personal tokens" icon="user-round" href="/docs/workspace/tokens">
    Use for your own CLI access across licensed workspaces. Manage and rotate personal tokens from Account Settings → Tokens.
  </Card>

  <Card title="Organization tokens" icon="building-2" href="/docs/workspace/tokens">
    Use for CI/CD and shared automation scoped to one workspace. Manage organization tokens from Organization → API Tokens.
  </Card>
</CardGroup>

## Troubleshoot account security issues

<AccordionGroup>
  <Accordion title="Password update fails" icon="key-round">
    Re-enter your current password carefully and confirm that the new password matches the confirmation field exactly.
  </Accordion>

  <Accordion title="Password reset link is invalid" icon="link-2-off">
    Request a new reset link from the sign-in page. The reset page requires a valid token in the URL to proceed.
  </Accordion>

  <Accordion title="Workspace access is missing after sign-in" icon="users">
    A successful login does not guarantee workspace access. If you see a no-license screen or are missing from the team list, check your seat assignment with a workspace owner or admin.
  </Accordion>
</AccordionGroup>