Your account and security

Your details

Open Your account in the web panel. Enter a display name and choose Save name. This changes how you identify yourself, not your login email or ownership of your Macs.

Email changes and recovery emails remain unavailable until secure delivery has been configured, tested and its worker is online. A disabled button does not mean a verification email was sent. Keep your current password in your password manager; contact your inviter if you lose access.

Change your email when available

Choose Change email to open the form. Enter the new address and your current MacServe password, then choose Send confirmation to both inboxes. Open the link in each inbox, sign in to the same account if asked, and choose Confirm this inbox. Links expire after one hour; opening an email link alone does not approve the change. Your sign-in address stays unchanged until both inboxes confirm. You can cancel from Your account.

After confirmation, other browser sessions are signed out and both inboxes receive a notice. Your account, Macs, payment entitlements, AI grants and SSH keys remain the same. Historical billing receipts keep their original email. If either message does not arrive, check spam, wait a few minutes or contact your inviter. Never give an assistant your password or forward verification links to it.

Recover a password when available

Choose Forgot password? on the sign-in page and enter your account email. The response deliberately does not reveal whether an account exists. Follow the one-hour reset link from your inbox and enter a new password. All browser sessions are signed out after a successful reset; sign in again. Other active reset links are invalidated.

Resetting a password does not revoke AI grants or remove SSH keys or end existing SSH sessions. Review those separately if access may have been compromised. If Forgot password? is absent or delivery is unavailable, contact your inviter; no recovery email has been promised.

Change your password

In Your account, choose Change password to open the form. Enter your current password, then a different new password of at least 12 characters twice, and choose Change password to save it. Cancel password change closes the form and clears what you entered. A successful change keeps this browser signed in and invalidates other browser sessions and outstanding recovery links.

Passwords belong only in the secure web form. An agent cannot collect them through MCP. Password changes do not revoke AI grants, remove SSH keys or end existing SSH sessions; review those separately if you are responding to suspected compromise.

Review access and history

Signed-in browsers shows three sessions at a time. Use Next and Previous to browse the active sessions returned by the server (up to 100). Details shows a session’s expiry and known timestamps. Multiple sessions can belong to the same browser. Choose Sign out, then confirm the particular session; browsing the list never signs anyone out or interrupts hosting. Historical timestamps may be unknown; MacServe does not invent them.

Account history shows five changes at a time, with actor, time, item and outcome. Use Older and Newer to browse earlier changes, or Latest to return to recent activity. New events do not move the page while you are reading older history. Tracking starts when it was introduced; earlier actions are not reconstructed. Payment and refund history lives in Billing & usage; AI access shows agent grants and revocation.

Manage through MCP

With account:read an assistant can inspect your profile, recorded history and browser sessions. With account:write it can change your display name. Sensitive security changes use macserve_account_security_handoff, which returns the secure account page for you to review. Neither permission gives an assistant your password or browser tokens.