Manage your security preferences#

Select your profile picture, select Profile, and then select Security to configure your password, view access history, and to view or logout of active sessions.

Security setting	Description
Password	You may change your password if you’ve logged in by email using Mattermost in a web browser or using the desktop app. Note If you sign in to Mattermost using a single sign-on service, you must update your password through your SSO service account.
Multi-factor authentication (MFA)	If your system admin has enabled multi-factor authentication (MFA), you can require a passcode in addition to your password to log-in to your Mattermost account. You’ll need to download a MFA passcode generation app, such as Google Authenticator or a similar app, and then set-up MFA in your Mattermost account. Download a passcode generation app Download Google Authenticator for an Apple device from iTunes Download Google Authenticator for an Android device from Google Play Enable MFA in Mattermost Open Mattermost in a web browser or the desktop app. In Mattermost, from your profile picture, select Profile > Security. Under Multi-factor Authentication, select Edit. Select Add MFA to Account. Scan the QR code or enter the Secret provided by Mattermost into the authenticator app. In Mattermost, enter the MFA Code generated by the authenticator app. Select Save.
Sign-in method	This option allows you to switch your login method between using email/username and password and single sign-on credentials. You can configure this setting using Mattermost in a web browser or using the desktop app. Note While you can choose to log in with either set of credentials, you can only enable one login method at a time. For example, if AD/LDAP single sign-on is enabled, you can select Switch to using AD/LDAP, and enter your AD/LDAP credentials to switch login over to AD/LDAP. You’ll need to enter the password for your email account to verify your existing credentials. Following the change, you’ll receive an email to confirm the action.
View access history	Using Mattermost in a browser or using the desktop app, you can access a chronological list of the last 20 login and logout attempts, channel creations and deletions, account settings changes, or channel setting modifications made with your account. The details of the Session ID, which is a unique identifier for each Mattermost browser session, and IP Address of the action is recorded for audit log purposes.
View and log out of active sessions	Sessions are created when you log in with your credentials a new browser on a device. Sessions let you use Mattermost for up to 30 days without having to log in again. Using Mattermost in a browser or using the desktop app: Select Logout during an active session if you want to revoke automatic login privileges for a specific browser or device. Select More Info to view browser and system details.