Task BunSign in

Account & security

Profile, password, 2FA, passkeys, social logins, and appearance.

Manage your personal account from Settings → Profile (open it from the account menu at the bottom of the sidebar).

Profile

Update your display name and role title. Your email is set when you’re invited and can’t be changed here.

Password

Change your password by entering your current one and a new one twice. Accounts created purely through social login may not have a password until you set one.

Two-factor authentication (2FA)

  1. 1Under Two-factor authentication, click Enable authenticator app.
  2. 2Scan the QR code with an authenticator app (Google Authenticator, 1Password, Authy), or copy the setup key.
  3. 3Enter the 6-digit code to confirm and turn it on.
  4. 4Save your recovery codes somewhere safe — each one signs you in once if you lose your device.
The security settings showing two-factor authentication and passkeys
Settings → Profile: manage 2FA, passkeys, and your password.
Recovery codes are your backup. Without your authenticator and without a recovery code, you can be locked out.

Passkeys

Add a passkey to sign in with your device’s biometrics or PIN — no password needed. Register one under Passkeys, name it (e.g. “MacBook Pro”), and use it on the login screen next time. Remove passkeys you no longer use.

Social logins

If your email matches a Google/Facebook/Apple/LinkedIn account, signing in with that provider links it to your account automatically, so you can use either method.

Appearance

Under Settings → Appearance (or the account menu) pick light/dark mode, an accent color, a typeface, and card density. It’s personal to you and saved instantly.

Notification preferences

Under Settings → Notifications, toggle email vs browser delivery and turn individual categories (assignments, comments, mentions, account) on or off.

Common questions

I lost my 2FA device — how do I get in?

Use one of the recovery codes you saved when enabling two-factor authentication.

Are passkeys safer than passwords?

Yes — passkeys are tied to your device and resist phishing, with nothing to type or leak.