Security and privacy

Open Settings → Security & Privacy. Treat unexpected devices or activity as a security incident and contact your administrator immediately.

Password

For password-based accounts, select Change password. A new password must contain at least eight characters, one number, and one special character.

Google- or Microsoft-managed accounts show Managed by provider. Change that password through the identity provider.

Two-step verification

Two-step verification is required for Persate accounts. When an authenticator is enrolled, the row shows a Live status and Replace authenticator.

Replacement keeps the current authenticator active while the new one is enrolled. Have the new device available and finish the confirmation before leaving the flow.

Active sessions

Review the devices currently signed in. Sign out sessions that you do not recognize. Signing out another session may take effect when that client next checks its session.

Trusted devices

When this panel is available, it lists browsers that may skip the authenticator challenge at sign-in for up to 30 days. Trust applies to that browser, not to the whole computer, and sensitive actions still require verification.

Managing trusted devices requires a current authenticator code. Revoke an individual browser or all other trusted browsers if a device is lost, shared, or no longer controlled by you.

Login history

Review recent sign-in activity, including the time and device information made available to Persate. If the list fails to load, refresh once; do not assume an empty screen means there was no activity.

Data and export

Data & export downloads a copy of your personal data as a structured, machine-readable JSON file (GDPR Articles 15 and 20). The file contains account details, profile and preferences, organization membership, a manifest of files you own, active sessions, and login history.

Select Request export, then confirm. Password-based accounts confirm with the current password; Google- or Microsoft-managed accounts confirm through two-step verification. The browser then downloads the file directly — nothing is sent by email.

File contents are not included in the export file; download them from the Repository. For requests the export does not cover, including permanent account deletion, use your organization's approved support channel.

Troubleshooting

• Authenticator code rejected — use the current six-digit code and confirm the device clock is accurate.
• Trusted-devices panel unavailable — the account has no enrolled authenticator or this security backend is not enabled.
• Unknown session or sign-in — sign it out if possible, change the password for password accounts, and report it.