> ## Documentation Index
> Fetch the complete documentation index at: https://docs.orbit-dev.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Account

> Registering, signing in, and managing your profile and security

## Registering

Anyone can register a new account from the sign-up page. Orbit validates:

| Field    | Rule                                                                                                      |
| -------- | --------------------------------------------------------------------------------------------------------- |
| Name     | Required, up to 255 characters                                                                            |
| Email    | Required, valid email format, must be lowercase, up to 255 characters, must be unique across all accounts |
| Password | Required, must be confirmed (entered twice), must meet Laravel's default password rules                   |

The very first account ever registered becomes an [admin](/guides/roles-and-permissions); every account after that is a regular member.

## Signing in and out

Sign in with your email and password. Signing out is a single click — Orbit doesn't ask you to confirm before ending your session.

By default a session stays valid for as long as you're active, but you can shorten that from [Security & access](#security-and-access) below.

## Account settings

Everything covered on this page lives under **Settings → [account section](/concepts/settings)** — open it from the sidebar, or jump straight to a tab with `/settings?tab=<tab-id>`.

### Profile

From the **Profile** tab you can:

* Change your display name — validated inline (3–30 characters), with a "saved" / "unsaved changes" indicator so you always know whether an edit has actually been persisted
* Upload a new profile photo, or reset back to the default avatar

Avatar uploads are validated client-side (JPEG, PNG, or GIF, 5 MB max) and shown in a live preview before you save. On the server, every uploaded avatar is screened by an NSFW detection service before it's accepted — an upload classified as unsafe is rejected outright, with an error explaining why. If the moderation service itself is unreachable, the upload is rejected rather than silently allowed through.

<Note>
  There's still no way to change your email address through the app. Name, avatar, and password are all self-service now; email is not.
</Note>

### Security and access

From the **Security & access** tab you can:

* Change your password, with live strength-meter feedback as you type
* View every session currently signed in to your account — IP address, browser user-agent string, and when it was last active — and revoke any one of them individually, or revoke every session except the one you're currently using
* Choose how long a session can stay idle before it's forced to sign in again: **1 hour**, **8 hours**, **24 hours**, or **7 days**. This is enforced server-side — once your last recorded activity is older than your chosen window, the next request signs you out automatically, regardless of what the client does
* Permanently delete your account — the confirmation modal requires typing `DELETE` before the button activates, since this can't be undone

### Preferences and notifications

Your default issue view, interface theme, and accent color live under **Preferences** — see [Settings](/concepts/settings) and [Appearance](/guides/appearance). Per-type, per-channel notification preferences live under **Notifications** — see [Notifications](/concepts/notifications).

<Note>
  **Integrations** and **Export** tabs exist in the Settings navigation but aren't built out yet — they're shown with a "Soon" badge and aren't reachable. See [Settings](/concepts/settings#tabs) for the full list of what is and isn't available today.
</Note>


## Related topics

- [Settings](/concepts/settings.md)
- [FAQ and troubleshooting](/reference/faq.md)
- [Known limitations](/reference/known-limitations.md)