My account
My account is about you, not about the business. You open it with the button that shows your name, at the bottom of the sidebar. Every role has it, also a Viewer. There are two tabs: My account → Profile and My account → Security.
Profile
Changes save by themselves.
| Field | What it does |
|---|---|
| Full name | Your name in the team and at the bottom of the sidebar. |
| The address you sign in with. You cannot change it here. | |
| Phone | Transferred calls ring on this number when a transfer rule points to you as a team member (also read the warning in Transfers (call forwarding)). This is not the number you sign in with. |
| Available for transfers | When this is off, the assistant skips you when transferring. Useful on a day off or during holidays. |
| Dashboard language | Only for you. Signing in opens the dashboard in this language. The same choice is under Language in the menu of the button with your name. |
If you work on behalf of another business, as a reseller, you cannot change these details and the language only applies to this session.
An Admin can also change your name, phone and availability under Settings → Team. The language for customers and notifications is something else: it is under Settings → Business.
Secure your login
Without an extra method you sign in with the email link or the code from that email. Under My account → Security you add a method to that. One is enough. If you set up more, you have a backup if you lose one.
| Method | How it works | Maximum |
|---|---|---|
| Passkey | Sign in with your fingerprint, face or device PIN. This is the preferred method and takes a few seconds to set up. | 20 |
| Authenticator app | An app on your phone shows a 6-digit code that changes every 30 seconds. | 1 |
| Hardware key | A key such as a YubiKey, which you plug in or hold against your device. | 20 |
| Text message | A 6-digit code by text message to your mobile. This is less secure, because a SIM swap can intercept the code. A passkey or authenticator app is preferred. | 10 numbers |
On top of that, you keep a few emergency codes with Account recovery.
An extra method applies to every way of signing in: after the email link, and also after Continue with Google, Apple or Microsoft or your company's sign-in. You then pass the same step before the dashboard opens.
Passkey
Choose Create passkey and confirm with your device. After that you sign in on this device without waiting for an email. Your fingerprint, face scan and PIN stay on your own device. Each passkey has a name. The pencil changes it. The bin asks before it removes the passkey.
Authenticator app
- Choose Set up authenticator. If you have no app yet, choose I don't have an authentication app yet: that opens the built-in method for this device, or a download link.
- On an iPhone, iPad or Mac you first choose how to keep the codes:
- Via default Passwords app: at Step 1, Save a temporary password, press the button twice and choose Save or Update. The temporary password does not change how you sign in. At Step 2, Store the verification code, tap Store code in Passwords, search for Yarla, tap the account and return to this page.
- Via QR code: for an authenticator app on this or another device. On an iPhone or iPad, touch and hold the QR code, scroll down in the menu and choose Add verification code.
- Via secret key: to paste the key into that app when scanning does not work. Copy sits beside the secret and copies all of it, even when a small screen cuts the line short.
- On other devices you scan the QR code or copy the secret. Windows and Android have no built-in generator; use Microsoft Authenticator or Google Authenticator. Linux uses an authenticator app. The steps on the page follow your device and, where it fits, link to the guide from Apple, Microsoft or Google.
- At Last step, enter the 6-digit code the app shows and choose Confirm. On an Apple device, check the verification code suggestion above the keyboard.
On Apple devices, where the codes live depends on the version. iOS 18 and later uses the Passwords app, iOS 15 to 17 uses Settings, then Passwords. On a Mac, the Passwords app needs macOS Sequoia or later, Ventura and Sonoma use System Settings, and Monterey uses System Preferences. On a Mac with Monterey or later you can also Control-click the QR code in Safari.
Turn off authenticator removes it. You confirm this with the code from the app. If you also have another method, you first choose at Choose how to confirm turning this off. You can try 10 codes an hour, and ask for 5 text messages an hour.
Hardware key
Choose Add a hardware key and follow your browser's prompt. Each key has a name. The pencil changes it. The bin asks before it removes the key.
Text message
Fill in your number under Mobile number. The field shows the country and its code, and a 0 at the start is removed. Choose Send code, enter the code and choose Confirm number. Each number shows when it was added, and removing a number asks first.
The code comes from a sender name, not from a phone number. In countries that refuse this, including the United States and Canada, the text message does not arrive.
Account recovery
Generate recovery codes creates three single-use codes. Copy them and store them somewhere safe: they are shown only once. After that you only see when they were made and which ones have been used. Generate new recovery codes invalidates all existing codes. You get an email when codes are made or used.
On sign-in you choose Continue with recovery code. That link is on the email code screen and on a second step, except on the authenticator code screen. Each code works once.
How signing in then works
- After the email link you confirm with the authenticator, the hardware key or the SMS code, when those are on. If more than one is on, you choose. A passkey only joins as an extra choice when one of those is also on. If you only have a passkey, the email link asks for no second step.
- With a saved passkey, through Continue with passkey, there is no second step.
- Through Google, Apple or Microsoft we only ask for the authenticator, when it is on.
The email link keeps working. If your business requires single sign-on, the rules in Single sign-on (SSO) apply.
Where you're signed in
You stay signed in on a device, also after you close the browser, until you have not used it for 30 days. After 90 days you always sign in again.
Under My account → Security, Where you're signed in lists every device and browser your login is signed in on, with when it was last active, when you signed in and its IP address. This device marks the one you are using. Sign out signs out one device; Sign out all other devices signs out all but this one. A signed-out device has to sign in again at its next click.
Removing a passkey, hardware key or text-message number, switching the authenticator on or off, or making new recovery codes signs out all your other devices too. If your login is removed or deactivated, every device is signed out.
Changes that ask you to sign in again
Some changes only work within 2 hours after you sign in: adding or removing a sign-in method, turning the authenticator on or off, new recovery codes, API keys, a new webhook secret, adding or changing an event webhook, single sign-on and sign-in rules, inviting or removing team members, changing their role or deactivating them, giving or withdrawing your reseller's access, and changing the payment method or cancelling. Staying signed in for a long time does not count as signing in.
Changes to who can get into your account (team members and roles, API keys, event webhooks, single sign-on, reseller access) are made by your own team only. A reseller working on your behalf, or our support while it looks into a question, cannot make them.
When that time has passed, Confirm access opens straight away: the same sign-in screen, with your own email address already filled in. You choose how to confirm (a code by email, a passkey, Google, Apple, Microsoft or your company's single sign-on). You stay signed in meanwhile: Back, or your browser's back button, returns you to the page you were on. After confirming you also land back on that page and make the change again. After that, we won't ask again for 2 hours. You can only confirm with the login you are already signed in with.
When your business requires a second factor
On Enterprise, an admin can turn on Require a second factor in the dashboard. You then land on My account → Security, from every other page, until you have set up an authenticator app, passkey or hardware key. An SMS code does not count for this.
Remove your login
Under My account → Profile, Remove your login removes only your own login, with the Remove my login button. The card starts folded. The business, its data and your team members stay, and your passkeys, hardware keys, authenticator and recovery codes are deleted. You get an email, and so do the other admins.
This works only when another team member exists and you are not the last admin. If you are the only one, the card points to Settings → Business (for a last admin, to Team). If your company manages the login through single sign-on, ask your admin to deactivate you.
This only works within 10 minutes after you sign in. The card shows until what time you can do it. When that time has passed, Confirm access opens; you stay signed in and land back on the same page after confirming.