Account security
Your account settings are in Settings → Account (open the profile menu at the bottom of the sidebar, then Settings).
Profile
Section titled “Profile”- Name. Select Edit name. You change it on WeHarness sign-in’s own page.
- Email address. To change it, write to info@weharness.io from your current address.
- Profile photo. Optional. Select Upload photo and choose a PNG, JPEG or WebP image. Your browser crops it to a square and makes it small before it is sent; the original never leaves your device. It is shown to you and to members of your workspaces. Without one, your initial is shown.
Password
Section titled “Password”Select Change password. WeHarness sign-in asks you to sign in again, then for the new password. A password has at least 12 characters and is different from your email address. The app never sees your password.
Forgot it? Select Forgot Password? on the sign-in page. The reset link works for 30 minutes.
Two-step sign-in
Section titled “Two-step sign-in”Turn it on under Sign-in and security: after your password, sign-in also asks for a code from an authenticator app. Make recovery codes as well; each signs you in once if you lose your phone. See Getting access for the steps, removing an authenticator and recovery.
Sign out everywhere
Section titled “Sign out everywhere”Sign out everywhere signs you out of WeHarness on every device, this one included. It also ends the sign-in of every coding tool you connected over MCP: each one asks you to sign in again. Use it after using a shared computer, or if you think someone else used your account.
Coding tools
Section titled “Coding tools”Connect MCP in the sidebar lists the coding tools connected to your account, with when each was last used and its last tool. Disconnect stops one at once. Tools you allowed at sign-in that never connected are listed apart, under Allowed at sign-in, never connected. If one is not yours, use Sign out everywhere. See Sign-in and disconnect.
How long you stay signed in
Section titled “How long you stay signed in”| The web app | Signs you out after 2 hours without activity, and 12 hours after sign-in |
| A coding tool over MCP | Stays signed in while you use it: up to 30 days without use, and 90 days at most |
| Failed sign-ins | After 10, the account is paused for a while |
Workspace access history
Section titled “Workspace access history”Owners and admins see Settings → Access history: who did what and when in the workspace. It lists invitations, role changes and removals, ownership transfers, approvals of plans, environments, pushes, scenario cases and lessons, GitHub links, ingest keys, memory changes, file uploads and deletions, and export downloads. Records are kept for 365 days.
WeHarness staff
Section titled “WeHarness staff”WeHarness staff never join your workspace without the owner’s approval, and see account and usage metadata, not your sessions, source, prompts, outputs, memory or traces. See Security.