Skip to content

Your account

Account self-service lives in two places, both reachable from the user menu in the top bar:

  • Settings — change your password.
  • Account security — manage your PIN, two-factor authentication, backup codes, remembered devices, and (if you’re the owner) ownership transfer.

Change your password

  1. Open Settings from the user menu.
  2. Enter your current password.
  3. Enter a new password — at least 8 characters, including an uppercase letter and a digit.
  4. Confirm it and submit. A success message appears at the top of the page.

Changing your password does not reset your PIN, 2FA, or backup codes, and it does not sign out your remembered devices.

Change your PIN

Your PIN is the 6-digit code you use to acknowledge alarms from SMS, voice calls, and the XVision kiosk. It’s separate from your login password.

  1. Open Account security and click Change PIN.
  2. Enter your current password.
  3. Enter a new 6-digit PIN and confirm it.
  4. Submit. You’re returned to the account security page.

Re-enroll your 2FA device

If you got a new phone or want to switch authenticator apps:

  1. Open Account security.
  2. Click Re-enroll TOTP device.
  3. Scan the new QR code with your authenticator app.
  4. Enter the current 6-digit code to confirm. Your old device stops working as soon as this succeeds.

Backup codes

Backup codes let you sign in if you lose your 2FA device. The account security page shows how many unused codes you have left.

Regenerate backup codes

  1. Open Account security.
  2. Click Regenerate backup codes.
  3. Confirm the dialog — once you do, your old codes stop working immediately.
  4. The new codes appear once. Copy or print them now — they are not shown again after you leave this page.

Each code is 8 characters and usable exactly once. Using any backup code to sign in signs out every remembered device on your account — you’ll have to complete the 2FA challenge again on each browser.

Remembered devices

The account security page lists every browser where you ticked Remember this device for 1 year on the 2FA screen. Each entry shows the browser, operating system, approximate location, and when it was remembered. Click Revoke on an entry to require a fresh 2FA challenge the next time that browser signs in.

Revoking a device does not sign that session out immediately — the active session there continues until it expires. To end it right now, use Sign out all other sessions below the list.

Ownership transfer (owner only)

Only the tenant owner sees the Transfer ownership section. Transferring sends a confirmation email to the target user; once they accept, you drop to admin and they become owner. Full details in the admin guide.

What you can’t change here

  • Email address — email changes require an admin.
  • Phone number — change via an admin, or (for new phones not yet in the system) start at /legal/sms-consent.
  • Delete my account — not self-service. Ask your tenant admin to deactivate you, or email support@xcentrix.net to request full data deletion under the applicable privacy regulation.