Account, password, sessions, and theme

Everything personal to your account lives in Settings. This guide covers the bits people look for most — password, connected sign-ins, active sessions, and theme.

Switch theme (dark / light)

Settings → Appearance has a Dark / Light toggle. Marriska defaults to dark.

Theme is per-device

Your theme choice is stored in the browser, not on your account — so it won’t follow you to another device or browser. Set it once per machine.

Change your password

Under Settings → Security:

• If your account has a password, use Change Password — current password, new password, confirm.
• If you signed up with Google or GitHub and never set a password, you’ll see Set Password instead. Setting one lets you also sign in with email.

Changing your password signs you out everywhere

A successful password change revokes all sessions, including the one you’re using — you’ll log back in with the new password. That’s deliberate: if you’re changing your password because it might be compromised, you want every existing session gone.

There’s no “forgot password” email flow yet. You can change or set a password while signed in, but if you’re locked out, sign in with your linked Google/GitHub account instead.

Link Google or GitHub

Settings → Security → Connected Accounts lists Google and GitHub. Connect to link a provider, Unlink to remove it.

You can’t unlink your only sign-in method — if Google is the only way into your account and you haven’t set a password, set one first. (This keeps you from locking yourself out.)

Manage active sessions

Settings → Security → Active Sessions shows every device signed into your account — a device label, a masked IP, and when it was last used. Your current session is badged Current.

1. Sign out one device with its trash icon — handy if you left yourself logged in on a shared machine.

2. Sign out everywhere else with Revoke all other sessions — it drops every session except the one you’re in.

API keys

API keys (for CI and the CLI) also live under Settings → Security. They’re their own topic — see API keys.

AI providers (BYOK)

If your deployment has it enabled, Settings → AI Providers lets you connect your own OpenAI, Gemini, Groq, or Anthropic key. See Use your own OpenAI key.

What you can’t change in-app yet

Honest limits worth knowing:

• Display name and email are shown on the Account tab but aren’t editable in-app today.
• Forgot-password reset doesn’t exist — you change a password while signed in, not when locked out.

Related

• API keys — keys for CI and the CLI
• Export or delete your account — the Account tab’s Danger zone
• Security model — how sessions, tokens, and org isolation work