# Security

> Manage your password, two-step verification, passkeys and signed-in devices in your Endless account security settings, and see what isn't kept there.

Source: https://endless.app/docs/settings/security

**Settings → Account → Security** covers how you get into Endless, and nothing else. The page
sums itself up as *"Password, multi-factor authentication, passkeys, and active sessions."*

Like [Profile](/docs/settings/profile), it belongs to your account rather than to a workspace, so
every member can open it and what you set here applies wherever you sign in.

## Security settings

<Cards>
  <Card icon="<Lock />" title="Password">
    Set one, or change the one you have.
  </Card>

  <Card icon="<ShieldUser />" title="Two-step verification">
    A second factor on top of the password, so a stolen password isn't enough on
    its own.
  </Card>

  <Card icon="<Lock />" title="Passkeys">
    Sign in with the fingerprint, face or screen lock your device already uses,
    instead of typing anything.
  </Card>

  <Card icon="<Users />" title="Active devices">
    The sessions currently signed in to your account, and a way to end the ones
    you don't recognize.
  </Card>
</Cards>

<Callout type="info">
  This panel is supplied by the service that handles sign-in for Endless, so its
  wording, its layout and the exact options it offers can differ from the rest
  of the product — and can change without an Endless release. Treat the list
  above as what the page is *for*, not as a screenshot of it.
</Callout>

## What is *not* here

Security is about your account, not about your standing in a workspace. Two things people
look for here and won't find:

* **What you're allowed to do.** That comes from your role, and roles are set per workspace in
  **Settings → Members**. See [Roles and permissions](/docs/governance/roles-and-permissions).
* **Who else can see your work.** Visibility is decided per item, not per account — see
  [Assets and visibility](/docs/concepts/assets-and-visibility).

<Cards>
  <Card icon="<Users />" title="Your profile" href="/docs/settings/profile">
    Name, photo, language, and deleting your account.
  </Card>

  <Card icon="<ShieldUser />" title="Roles and permissions" href="/docs/governance/roles-and-permissions">
    What each role in a workspace can and can't do.
  </Card>
</Cards>