Help & Documentation

All of these controls are on one screen. Open Settings, then the 'Security & Privacy' tab. Scroll to the area you need.

• 'Email & Password' — change your sign-in email or password.
• 'Two-Factor Authentication' — add an authenticator app and manage recovery codes.
• 'Sessions & Devices' — see where you're signed in, revoke a session or sign out all other devices, and your device ID.
• 'Danger Zone' — sign out of this device and delete the account.

Two-factor authentication adds a second step at sign-in: after your password, you enter a 6-digit code from an authenticator app. Even if someone learns your password, they can't get in without your phone.

1. Open Settings → Security & Privacy and find 'Two-Factor Authentication'.
2. Click 'Add authenticator app'. A dialog shows a QR code and a text secret.
3. In your authenticator app (Google Authenticator, 1Password, Authy, Microsoft Authenticator…), scan the QR code — or type the secret if you can't scan.
4. Your app now shows a 6-digit code that rotates every 30 seconds.
5. Type that code into the verification field and confirm.
6. On success, a 'Save your recovery codes' window appears — do not skip it (see the next section).

When you first enable 2FA you're shown a set of one-time recovery codes. If you ever lose your authenticator app, a recovery code gets you back into your account. This is the safety net — treat it like a spare key.

• You get a fixed set of single-use codes. Each one works exactly once.
• 'Copy' puts them on the clipboard; 'Download' saves a small text file.
• You must tick 'I have saved my recovery codes in a safe place' before the window will close.
• The codes are shown only once. They are never displayed again — you can only regenerate a fresh set.
• Regenerating new codes immediately invalidates all the old ones.

Enrolled authenticators are listed under 'Two-Factor Authentication'. From here you can remove a factor or generate a new set of recovery codes — both require your password.

1. To remove an authenticator, click 'Remove' next to it and enter your password to confirm.
2. Removing your last remaining factor switches 2FA off entirely.
3. To refresh your backup codes, click 'Regenerate recovery codes', enter your password, and save the new list.
4. Acknowledge that the previous codes stop working before the new ones are shown.

Passkeys are not switched on in the released app yet: until they are, 'Add a passkey' does not appear and the authenticator app is your second step. Once enabled, a passkey lets you clear the second step with Touch ID, Face ID or a security key instead of typing a 6-digit code. It replaces the CODE, not your password — you still sign in with your email and password first, then confirm with the passkey.

1. Open Settings → Security & Privacy → Two-Factor Authentication and click 'Add a passkey'.
2. Give it a name that tells your devices apart — 'MacBook Touch ID', 'YubiKey' — so the factor list stays readable.
3. Click 'Register passkey' and confirm on your device when it asks.
4. The passkey then appears in the factor list beside any authenticator apps, and can be removed the same way.

With 2FA on, after your password you'll see a challenge screen asking for your 6-digit code. This screen is a gate — you can't click past it; you either pass the check or sign out.

1. Enter the current 6-digit code from your authenticator app.
2. Have a passkey on this device (where passkeys are switched on)? Click 'Use a passkey instead' and confirm with Touch ID, Face ID or your security key.
3. Lost your phone? Click 'Lost your authenticator? Use a recovery code' and enter one of your backup codes instead.
4. If you can't do either, click 'Sign out' to return to the sign-in screen.

Update your sign-in password from the 'Email & Password' area. You can also end every other session at the same time — useful after a shared or lost device.

1. Enter your current password.
2. Enter a new password (at least 8 characters, with an uppercase letter, a number, and a special character). Strength feedback appears as you type.
3. Confirm the new password.
4. Optionally tick 'Sign out of all other devices'.
5. If 2FA is on, enter your 6-digit code, then confirm with 'Change password'.

Your email is your sign-in identity. Changing it needs your password (and your 2FA code, if enabled), then a confirmation click in your inbox.

1. Enter the new email address.
2. Enter your current password to confirm it's you.
3. If 2FA is on, enter your 6-digit code.
4. Click 'Update email'. A verification message is sent to the new address.
5. Open that message and click the link to finalise the change.

'Sessions & Devices' lists everywhere your account is currently signed in. Revoke anything you don't recognise. Your device ID is also here, handy when contacting support.

• Each entry shows the device, browser, and when it was last active. Your current device is badged.
• 'Revoke' signs out a single other device's cloud access immediately.
• 'Sign out all other devices' ends every session except the one you are using — this device stays signed in.
• Your device ID can be copied with one click for support diagnostics.

Deleting is permanent and irreversible — it removes your profile, projects, gear lists, contacts, and your accounting records. Because German law requires you to keep invoices for ten years, the flow makes you download your tax records first.

1. Open the 'Danger Zone' and click 'Delete account'.
2. Click 'Download tax records (GoBD)' and let it finish — this is your legally required 10-year copy. Your invoices are encrypted, so this file is built on the device you are using: if that device has not synced all of them yet, the download stops and tells you how many are missing. Wait for sync to finish, or delete from a device that has them.
3. Optionally click 'Download full backup' for everything else.
4. Enter your current password, and your 6-digit code if 2FA is on.
5. Type 'DELETE' in the confirmation field.
6. Tick the box confirming you've downloaded your data, then click 'Permanently delete account'.