Security
Manage your OrbitPage account, sign-in security, connected applications and audit history, with guidance on account and workspace deletion.
Account settings belong to your sign-in identity, while access and audit history refer to the selected workspace. Use Account for your details and security controls, and Team for connected applications.
Set up an authenticator and recovery codes
In Account → Security, select Set up authenticator and confirm your identity when requested. Scan the QR code with a TOTP authenticator, enter its six-digit code and select Verify and enable. Store the one-time recovery codes privately before leaving the page.
Replace recovery codes invalidates the previous set. If your authenticator is unavailable at sign-in, use a saved recovery code; successful recovery resets two-factor authentication and signs out existing sessions. Set up protection again after recovering access.
Account details
Review your account information and public page details. Use the email/password or Google identity associated with the account when a sensitive action asks you to confirm your identity.
Keep the account's contact email accessible so you can receive verification and recovery messages.
Protect sign-in and recovery
Use Account → Security to change your password or add password sign-in to a Google-linked account. Follow the password requirements shown by the form. Confirm your current identity when requested.
If you forget your password, use the reset link on the sign-in page. For Google sign-in, manage recovery and two-step verification through your Google account. Do not share your sign-in credentials with collaborators.
AI MCP & Plugin connection
AI MCP & Plugin connection lists approved OAuth connections such as ChatGPT. Review the application, workspace and permissions, then revoke access when you no longer need it.
To connect an app to a different workspace, revoke the old connection and authorize it again. Personal API tokens are managed separately in Team.
Review workspace changes
Owners, administrators and custom members with member-visibility permission can search page and team-access events by actor, action and date. The log describes successful changes without including full page contents. History begins when recording was introduced; earlier changes are not reconstructed.
Before deleting
Export content you need to keep and review any active subscription, connected apps and shared workspaces before deletion. Workspace deletion is an owner action; removing a collaborator's access is a separate Team action.
Read the confirmation shown by the dashboard before continuing. Use Plan for cancellation and billing management.
