> ## Documentation Index
> Fetch the complete documentation index at: https://docs.borghq.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Profile & Security

> Manage your profile information, passkeys, linked accounts, and notification preferences

The Profile page lets you update your personal information, manage authentication credentials, and control how you receive email notifications. Open it from the user menu in the top-right corner by clicking **Profile**.

## Profile information

### Name

Your first and last name appear throughout the platform: in comments, activity feeds, and team lists. Update them here and click **Save**.

Saving your profile requires [step-up verification](/platform/step-up-verification) to confirm your identity.

### Email

Your email address is shown for reference but cannot be changed. It's tied to your authentication and is the address where OTP codes and notifications are sent.

### Profile picture

Upload a profile picture so your team can identify you across the platform. Click your avatar or the upload button to select an image.

* **Formats**: PNG or JPEG
* **Max size**: 2 MB
* **Remove**: click the remove icon on your current picture and confirm

## Passkeys

Passkeys let you sign in with biometrics (fingerprint, Face ID) or a hardware security key instead of an email OTP code. They're faster and more secure than one-time codes.

### Adding a passkey

1. Scroll to the **Passkeys** section on your profile page
2. Click **Add new passkey**
3. Follow your browser or device prompt to register the passkey (e.g. Touch ID, Windows Hello, or a USB security key)
4. Give the passkey a name so you can identify it later

You can register multiple passkeys, for example one on your laptop and another on your phone.

### Removing a passkey

Click **Remove** next to any passkey and confirm. You'll need to complete [step-up verification](/platform/step-up-verification) before the passkey is deleted.

<Warning>
  If you remove all your passkeys, you'll need to use the email OTP flow to sign in.
</Warning>

## Linked accounts

If you've signed in with an external provider (e.g. Google), the Linked Accounts card shows the connection so you can see which third-party identities are tied to your Odin account.

## Discussion notification preferences

This card controls whether you personally receive emails when there's a new reply in a finding's discussion thread. Your preferences override the organisation default set in [Organisation Settings](/platform/organisation-settings).

* **Receive discussion reply emails**: when on, you get emails for replies on findings at or above your chosen severity. When off, you receive nothing — even when the organisation default is on.
* **Minimum severity**: only get emails for findings at or above this severity (Low, Medium, High, or Critical).

<Tip>
  Mentions (e.g. <code>@you</code>) always send an email, regardless of these preferences or the organisation default. They override every threshold.
</Tip>

## Weekly summary

Odin bundles routine activity — status changes and discussion replies — into a [weekly summary](/platform/notifications#weekly-summary) recapping every finding you follow: one email plus an Alert Centre entry, sent Monday morning. It's the primary way you'll hear about findings where you're only a [default subscriber](/platform/organisation-settings#default-finding-subscribers) and haven't otherwise engaged, since those don't send an immediate alert.

* **Receive weekly summary**: on by default. Turn this off if you'd rather not get the digest email and Alert Centre entry.

<Tip>
  Turning this off only affects the weekly summary. Findings you actively follow — by clicking Follow, commenting, being @mentioned, or being assigned — still notify you immediately in the Alert Centre, and assignments and @mentions always email you too.
</Tip>

<Card title="Logging in" icon="right-to-bracket" href="/getting-started/logging-in">
  Learn about Odin's authentication methods
</Card>