Your account and security

Your DashboardWP account can reach the admin area of every site you connect, so it deserves the same care as a bank login. This guide covers the Settings page: profile, credentials, and two-factor authentication.

Profile and time zone

Set your display name (shown in activity logs and to teammates) and your time zone. The time zone is detected from your browser automatically and drives every schedule you own: automatic backups, scans and reports run at the local time you chose. Correcting the time zone re-anchors existing schedules, so “daily at 03:00” stays 03:00 for you.

Changing email and password

Changing the email address requires your current password and is confirmed by a link sent to the new address; until you click it, the old address stays active. Password changes also require the current password. If you forget the password, the login page’s reset flow emails you a link; a reset signs out other sessions.

Two-factor authentication

The Two-factor tab adds a second step to email-and-password logins. Two methods are available, alone or together:

• Authenticator app (TOTP): scan the QR code with any authenticator app (Google Authenticator, 1Password, Aegis and friends) and confirm with a code. From then on logins ask for the current six-digit code.
• Email codes: a six-digit code is mailed to you at login. Weaker than an app (anyone who owns your inbox owns the code) but far better than nothing.

Enabling or disabling a method asks for your password. Note that signing in with Google skips 2FA: Google has already verified you, and your Google account’s own protections apply.

Recovery codes

When you enable 2FA you receive ten one-time recovery codes. Each unlocks one login if you lose your phone or inbox. They are shown exactly once: store them in a password manager or print them. You can regenerate the set at any time, which invalidates the old codes.

Trusted devices

At the 2FA step you can tick remember this device; that browser then skips the second step for 14 days. The Two-factor tab lists your trusted devices and lets you revoke any of them instantly, for example after using a shared computer.

Deleting your account

At the bottom of Settings. Deleting removes your sites, backups and data from DashboardWP permanently (your WordPress sites themselves are untouched). The action requires typing a confirmation and cannot be undone.