Sign-in and account security
Open User Center and choose Security. The page may show the sign-in methods enabled for your account, active sessions, and security controls. Options vary when an organization requires single sign-on or when an identity provider owns the credential.
Password and recovery
Use the password-change or recovery flow provided by the sign-in page. Follow the verification link or code promptly; expired links must be requested again. Never share a reset link or one-time code. If you signed in through an external identity provider, change the password with that provider.
Multifactor authentication
When available, enroll an authenticator app by scanning the displayed setup code and entering the generated verification code. Store recovery codes in a secure place outside BuildWhat. To replace a lost authenticator, use a recovery method or contact the account administrator; do not repeatedly guess codes.
Sessions and access
Review session details and revoke a session you no longer recognize or use. Signing out of one device may not sign out other sessions. If you suspect account compromise, revoke active sessions, rotate connected credentials, and notify your organization owner.
Organization sign-in rules
The organization can enforce access, MFA, session duration, or approved identity providers. A policy-controlled field may be unavailable for personal editing. Ask an organization administrator to review the policy if you are blocked.