Settings

Account, preferences, security, connected accounts. Reachable from the avatar in the top-right.

Sections

Profile

• Display name
• Email (must reverify if changed)
• Profile picture
• Time-zone (default America/New_York)

Security

• Password — change at any time; must not match a known breach.
• MFA — TOTP, WebAuthn passkey, SMS. WebAuthn strongly recommended. After a successful TOTP sign-in, that same session may reuse the verification for password or email changes for five minutes; another session must verify separately.
• Devices — list of trusted devices; revoke any one.
• Sessions - list active sessions and sign out remotely. A browser session refresh keeps the original sign-in time and its session deadline. If the server cannot verify a marked browser session's deadline, a signed access token with the session marker makes the refresh expire so you can sign in again.
• Login history — last 50 login events with IP and device.

Connected accounts

• Schwab — connect, disconnect, reconnect, force-resync.
• (Roadmap: Alpaca, Tradier, IBKR.)

Notifications

• Channels per alert type.
• Quiet hours.
• Confluence floor for confluence alerts.
• Per-symbol cap based on the current plan catalog.
• Daily digest time (default 6 AM ET).

Preferences

• Complexity dial default (1–5).
• Default timeframe (1h default).
• MTF view layout (2x2 / 4x1 / list).
• Education progress visibility (show / hide on hub).

Plan / Billing

• See Billing.

Data

• Export — CSV of positions, trades, alerts, signals.
• Account deletion — DSAR-compliant request flow.

Common workflows

"Lower my alert volume"

1. Settings → Notifications.
2. Raise confluence floor to 0.8.
3. Lower per-symbol cap to 3/day.

"I lost my phone with my authenticator"

1. Sign out (or you'll lock yourself out further).
2. From the login page → "Reset MFA".
3. We email a one-time recovery link valid 24h.
4. Re-enroll your second factor on a new device.

"Export my data"

1. Settings → Data → Export.
2. Pick CSV scope (positions / trades / alerts / signals).
3. Smaller exports download immediately; larger exports email a link within 24h.

"Delete my account"

1. Settings → Data → Account deletion.
2. We confirm via email + a 14-day grace window.
3. After 14 days, all PII is purged; broker tokens revoked.

Tips & best practices

• Set up MFA on day one. WebAuthn (Touch ID, Face ID) is friction-free and far more secure than SMS.
• Review Devices quarterly. Revoke any device you don't recognize.
• The complexity default applies system-wide; per-chart overrides don't persist.

Plan / Billing

All settings are available on every tier. Notification cap differences are described in the per-feature pages.

Troubleshooting

• MFA reset email not arriving — check spam; whitelist [email protected].
• Cannot disconnect Schwab — disconnect requires verifying your password; reauth with current password first.
• Settings save spinner stuck — refresh; settings are atomic, so partial saves don't happen.