Account and security

Your account is personal and separate from your organization. It holds how you sign in, your name and email, and your notification preferences. Organization-wide settings (team, handle, branding, billing, Stripe) live under Organizations.

Account settings are under Settings in the sidebar: Profile, Security, and Notifications.

Signing in

Sign-in starts with your email ("Enter your email to continue."). What happens next depends on the account:

• Password accounts see "Welcome back! Enter your password to continue.", with an emailed code as the fallback.
• Google accounts continue with Sign in with Google.
• Passwordless accounts receive a 6-digit code by email. Entrants who submitted an entry with an email code have this kind of account; they never set a password unless they choose to on the Security page.

Temporary or disposable email domains are not accepted for sign-up, email codes, or email changes ("Temporary email addresses are not supported. Please use an address you keep").

Profile

Personal details holds your avatar, Name, and Email.

Changing your email

Email changes are confirmed from both addresses so an account cannot be moved by someone who only has one of them:

1. Next to Email, click Change and enter the new address in Change email address.
2. AwardKit emails your current address ("Approve email change request"). Open it and approve.
3. AwardKit then emails the new address ("Confirm your new email address"). Open it to finish; the page confirms "Email changed successfully".

The request expires if either step is left too long; start again from Profile. Your current address also receives "Email change requested for your AwardKit account" when a change starts, so an unexpected request is easy to spot.

Deleting your account

Delete account permanently deletes your account and all associated data. The confirmation asks you to tick a checkbox acknowledging what you are doing. If you are the sole owner of an organization, transfer ownership or delete the organization first.

Security

• Password: Change your password, or Set password if you signed up with Google or an email code. Setting a password is what unlocks two-factor authentication; until then the card explains why ("Set a password to enable two-factor authentication. Google sign-in is already secured by Google." or "...Your emailed sign-in codes already verify it is you each time.").
• Two-factor authentication: enable an Authenticator app to generate verification codes at sign-in. Store the Recovery codes shown when you enable it; you can regenerate them later from the same card.
• Connected accounts: link or unlink Google for one-click sign-in. You cannot disconnect your last sign-in method without setting a password first.
• Active sessions: every device signed in to your account, with Sign out for any session other than the current one.

Notifications

Marketing emails lets you choose which promotional emails you receive from AwardKit: the Newsletter (monthly award program tips and community highlights) and Product Updates (new features and important platform changes). Transactional emails about your programs, entries, judging, billing, and security are not optional and are unaffected by these switches.