# Sign-in and security

Manage your profile, password, two-factor authentication and Google sign-in, or delete your account.

These settings belong to your account and apply in every workspace. Find them under **Account** in **Settings**.

## Sign in

Sign in with your email address and password, or select **Continue with Google**. Select **Forgot password?** on the sign-in page to get a reset link by email.

New accounts must verify their email address before using eSignStack.

If your organization uses eSignStack through a platform, you may sign in from your platform's app instead. See [Platform sign-in](/docs/platform-sign-in).

## Profile

**Settings → Profile** has your name, email address and saved signature.

- **Name** and **Email address**: select **Save** after editing. If you change your email address, you need to verify the new one. We send a link to it.
- **Signature preferences**: save a signature and initials to reuse when you sign. Select **Remove** to clear one.

**Settings → Appearance** sets the theme on this device: **Light**, **Dark** or **System**.

## Password

Open **Settings → Security**. You're asked to confirm your password before the page opens.

Under **Update password**, enter your **Current password**, then a **New password** twice, and select **Save password**.

If you signed up with Google and never set a password, use **Forgot password?** on the sign-in page to create one.

## Two-factor authentication

Two-factor authentication asks for a code from an authenticator app each time you sign in.

1. In **Settings → Security**, select **Enable 2FA**.
2. Scan the QR code, or enter the setup key, in your authenticator app.
3. Enter the 6-digit code from the app and select **Confirm**.

After it's on, select **View recovery codes** and store them in a password manager. Each recovery code works once. If you lose your device, select **login using a recovery code** on the sign-in screen. Select **Regenerate codes** to replace the whole set.

Select **Disable 2FA** to turn it off.

Two-factor authentication also applies when you sign in with Google.

## Sign in with Google

**Continue with Google** appears on the sign-in and sign-up pages.

- If your Google account is already connected, you're signed in to that account.
- If not, and your Google email matches an eSignStack account, Google is connected to it and you're signed in. The Google email must be verified.
- If no account uses that email, a new account is created and verified.

### Connect or disconnect Google

In **Settings → Connected accounts**, select **Connect Google** and choose a Google account. It can use a different email address from your eSignStack account. The page then shows **Connected as** with the Google email.

Select **Disconnect** to remove it. You can still sign in with your password, or reset it by email if you don't have one.

A Google account can only be connected to one eSignStack account.

## Delete your account

In **Settings → Profile**, under **Danger zone**, select **Delete account** and enter your password.

Deletion is blocked while something still depends on your account:

- A workspace you own has other members or pending invitations. Transfer ownership or cancel the invitations first. See [Workspaces and members](/docs/workspaces-and-members).
- You've sent an envelope, or one has been sent from a workspace you own. Sent and completed envelopes and their history are kept, so contact support. This includes Sandbox envelopes, which you can remove with [Delete sandbox data](/docs/sandbox#delete-sandbox-data).
- You created templates, folders or other records in a workspace you don't own. Contact support.
- You're the only admin of a platform. Add another admin first.

Deleting your account ends your subscription immediately, without a prorated credit. On Platform, any unbilled extra API envelopes go on a final invoice. If the subscription can't be cancelled, nothing is deleted and you can try again.

Deletion can't be undone.