Account and security

Your account is personal and separate from your organization. It holds how you sign in, your name and email, and your notification preferences. Organization-wide settings (team, handle, branding, billing, Stripe) live under Organizations.

Account settings are under Settings in the sidebar: Profile, Security, and Notifications.

Signing in

Sign-in starts with your email. What happens next depends on the account:

• Password accounts enter their password, or choose Email me a sign-in code instead.
• Google accounts continue with Sign in with Google.
• Passwordless accounts receive a 6-digit code by email. Entrants who submitted an entry with an email code have this kind of account; they can set a password on the Security page if they want one.
• An email with no account gets Create an account, which opens sign-up with the address filled in, or Use a different email. No code is sent.

Passwords need at least 15 characters. Any characters work, spaces included, and there's no required mix of letters, numbers or symbols, so a few words with spaces make a good one. A password that has appeared in a known data breach is refused. A password set before this rule keeps working until you next change it.

If the automatic security check can't complete in your browser when you sign in, choose Email me a sign-in code instead, continue with Google, or try a private window.

Disposable email addresses can't be used.

Profile

Personal details holds your avatar, Name, and Email.

Changing your email

Email changes are confirmed from both addresses so an account cannot be moved by someone who only has one of them:

1. Next to Email, click Change and enter the new address in Change email address.
2. AwardKit emails your current address ("Approve email change request"). Open it and approve.
3. AwardKit then emails the new address ("Confirm your new email address"). Open it to finish.

The request expires if either step is left too long; start again from Profile. Your current address also receives "Email change requested for your AwardKit account" when a change starts, so an unexpected request is easy to spot.

Deleting your account

Delete account permanently deletes your account and all associated data. The confirmation asks you to tick a checkbox acknowledging what you are doing. Your account cannot be deleted while programs you created still exist, or while you are the Owner of an organization that still has programs or other members. The confirmation lists them. An Admin or the Owner deletes programs (restore archived ones first), then the Owner deletes the organization if other members are still on it. An organization you own alone, with no programs, is deleted along with your account.

Security

• Password: Change your password, or Set password if you signed up with Google or an email code. Setting a password is what unlocks two-factor authentication; until then the card explains why. Changing or setting your password here cancels any reset link still in your inbox, and changing it signs out every other device. Resetting it from a Forgot password email does both.
• Two-factor authentication: enable an Authenticator app to generate verification codes at sign-in. Store the Recovery codes shown when you enable it; you can regenerate them later from the same card.
• Connected accounts: link or unlink Google for one-click sign-in. You cannot disconnect your last sign-in method without setting a password first.
• Active sessions: every device signed in to your account, with Sign out for any session other than the current one.

Notifications

Marketing emails lets you choose which promotional emails you receive from AwardKit: the Newsletter (monthly award program tips and community highlights) and Product Updates (new features and important platform changes). Transactional emails about your programs, entries, judging, billing, and security are not optional and are unaffected by these switches.