Account and security settings

• Update your display name, avatar and profile details.
• Change your password, or manage the OAuth provider you signed in with.
• Set which notifications reach you by email.
• Review and revoke API keys and connected inboxes.

Good hygiene

• One API key per system, so revoking one never breaks the others.
• Grant the narrowest scopes that still work.
• Rotate keys periodically and remove ones with no recent use.
• Keep credentials in environment variables, never in a repository.