# Your account

> Your profile and sign-in security: password, two-factor authentication, recovery codes and passkeys.

Product: AI Cost Optimizer Gateway (ACOG). Web version: https://tessarac.com/docs/acog/administer/your-account. Last updated: 2026-10-16.

Open **Settings** from the menu under your name. Everyone can manage their own account.

## Profile

Your display name is editable: it is how your name appears across the console. Your organization, role and email address are managed by an admin.

## Sign-in security

**Hosted service.** Sign-in is handled by Tessarac's sign-in service or your organization's [single sign-on](https://tessarac.com/docs/acog/administer/single-sign-on.md). Manage your password, two-factor authentication and passkeys in the security panel on this page. If your organization uses single sign-on, your identity provider manages them.

**Self-hosted installation.** When you sign in with a password:

| | |
|---|---|
| Password | Change it at any time; you stay signed in |
| Two-factor authentication | A 6-digit code from an authenticator app at every sign-in. You receive recovery codes once: store them safely, each works once. |
| Passkeys | Sign in with your device's screen lock or a hardware security key |

People who sign in through single sign-on manage these with their identity provider.

## Sessions

On a self-hosted installation, a console session lasts 24 hours from your last activity. Signing out on the hosted service also ends your session with Tessarac's sign-in service, so the next sign-in asks who you are.