Skip to Content
How-to guidesHow-to guidesProfile, password, passkeys

Manage profile, password, and passkeys

/settings is the personal-account surface. Everything here applies to your dashboard session, not your agents.

Display name

The first card. Input field, edit it, click Save. “Display name saved.” confirms.

Display name appears in the audit log next to actions you took as the owner (e.g., approvals you actioned).

Email and password

Both are managed by our sign-in provider. The Account Management card on /settings has a Manage account → button that opens your hosted account profile.

In that profile, you can:

  • Change primary email (verifies the new address before switching)
  • Change password (or remove it, if you’ve added a passkey)
  • Add or remove social connections (GitHub, etc.)
  • Sign out of other sessions
  • Delete your sign-in identity (this also soft-deletes your AgentValet owner)

There’s no separate password form in AgentValet itself; password changes happen in that profile.

Passkeys

The One-tap mobile approval card on /settings. Lists every passkey registered against your owner, with a Remove button per entry.

To add one:

  1. Type a device name (“iPhone 15”, “MacBook Touch ID”, “YubiKey”)
  2. Click Register this device
  3. The browser/OS prompts for biometric or hardware key setup
  4. The credential is stored against your owner record

Once registered, the device can:

  • Approve actions via biometric on /approvals and /m/approvals/:id
  • Approve via biometric on magic-link approval pages (/approve?token=...)

Passkeys do NOT yet replace your dashboard sign-in — the hosted sign-in flow is the only sign-in path today. Passkey-based dashboard login is on the roadmap.

Why passkey over password

Two reasons:

  1. It can’t be phished. A passkey is bound to the origin. Even a perfect-looking spoofed /approve?token=... page can’t trick your device into signing.
  2. It can’t be reused if it leaks. Each device’s credential is unique to that device.

If you’re going to register one passkey, register it on the device you most often use for approvals (probably your phone).

Signing out

Top-right user menu → Sign out. Ends your dashboard session.

Your agents are unaffected — they sign with their own keys, not your session.

Next

Last updated on
Read agent self-reportsOwner ID & Proxy URL