Account & security
Manage your Servor account — edit your profile, set the appearance, turn on two-factor authentication (MFA) and review your active sessions.
Keep your Servor account secure and set up the way you like it. This page covers your profile, appearance settings, turning on two-factor authentication (MFA), reviewing your active sessions, and signing out.
Account security vs. your vault
Your account login (and MFA) protects access to Servor. Your vault passphrase separately protects your encrypted data inside the browser. They're two different locks — set up both.
Edit your profile
Your profile is how teammates recognize you across servers, incidents and audit logs.
Open account settings
Click your avatar in the top bar and choose Account (or go to Settings) — or open your account settings directly.
Update your details
Change your name, email and profile picture. Your name and avatar appear on activity and in your team's member list.
Save
Save your changes — they take effect immediately.
Set the appearance
Choose how Servor looks. Pick light, dark, or system (which follows your operating system) from the appearance settings. Your choice is remembered on this device.
Set up two-factor authentication (MFA)
Two-factor authentication adds a second step to every sign-in, so a stolen password alone can't get into your account. We strongly recommend turning it on.
Open the security section
In account settings, find Security — or go straight to Security settings — and choose to add two-factor authentication.
Scan the QR code
Open your authenticator app (for example 1Password, Authy, or Google Authenticator) and scan the QR code Servor shows. This links your account to the app.
Enter the 6-digit code
Type the code from your authenticator to confirm the link works.
Save your backup codes
Servor gives you one-time backup codes. Save them somewhere safe — they let you sign in if you ever lose your phone.
Keep backup codes with your recovery key
A password manager is a good home for both your MFA backup codes and your vault recovery key — just don't store them next to your password.
Losing your second factor
If you lose access to your authenticator app, use a backup code to sign in, then set up MFA again with a new device. Without your phone and without a backup code, you may be locked out of your account — save those codes.
Review active sessions
Servor keeps track of the devices and browsers signed in to your account. Reviewing them is the fastest way to spot anything you don't recognize.
Open active sessions
In the Security section, open Active sessions. You'll see each session with its device, browser and approximate location.
Revoke anything unfamiliar
If a session isn't you, revoke it. That signs that device out immediately.
Change your password if in doubt
If you see something suspicious, revoke it and change your password. Consider turning on MFA if you haven't already.
Signing out a session locks its vault
Revoking a session ends it on that device. The next time anyone signs in there, the vault will be locked again and require the passphrase before running anything.
Sign out
To sign out of the device you're on, click your avatar in the top bar and choose Sign out. This ends your session and locks your vault on this device. To sign out other devices, revoke their sessions from Active sessions above.