Account Security and Device Experience
Account settings include MFA and password controls, account details, linked bank accounts, invitations, password reset, and security information. The Dashboard also provides an in-app notification inbox and wallet verification or upgrade routes.
The public site supports install/update and offline behavior. The Dashboard has native-shell compatibility and load-failure states, plus optional device-notification consent. These controls describe the observed client experience; device registration, push delivery, and identity security policy are owned by their respective services.
Rules
- Protected account settings require authentication and profile ownership checks where profile-scoped.
- Password reset and MFA recovery must use the identity provider’s verified flow rather than treating a client route as a credential change.
- Offline public content must not be interpreted as authorization to retain private dashboard data.
- A compatibility block or application load failure must provide a clear next action instead of silently continuing.