> ## Documentation Index
> Fetch the complete documentation index at: https://docs.begin.eu/llms.txt
> Use this file to discover all available pages before exploring further.
# Secure your account
> Manage your passkeys, sign out other devices and revoke connected AI clients.
Open **Settings → Security** to check where you are signed in, manage passkeys and remove external AI clients from your account. These controls secure your account; they do not change the access roles you give your team.
## Sign out other devices
**Active sessions** lists signed-in browsers and devices, their IP addresses and recent activity. **This device** marks the session you are using now.
Choose **Revoke** beside an unfamiliar or unused session. To sign out everywhere else, choose **Revoke all other sessions** and confirm. Your current session stays signed in.
If a phone or laptop is lost, revoke its session from a device you still control. Also remove any passkey you no longer want that device to use.
## Add and manage passkeys
Choose **Add passkey** and use a name you will recognise, such as your device’s name.
Follow the fingerprint, face, PIN or security-key prompt. If Begin asks you to verify your
account again, complete that check.
Confirm the new passkey appears in the list. You can rename it later to keep devices
recognisable.
Begin has no password and no separate two-factor code. Sign-in is a one-time code to your verified email or phone, a passkey, or a linked social account; a passkey is the strongest option.
Adding a passkey requires a browser or device that supports passkeys. Remove an unused passkey from its row and confirm. Begin prevents you from removing your last sign-in method; keep another working method before removing one you rely on.
## Revoke connected AI clients
**Connected MCP clients** lists external tools authorised through Begin MCP. Check the client name and any workspace shown, then choose **Revoke** to disconnect it. You can also revoke all connected clients.
Revocation takes effect immediately. It does not delete information the external tool has already received. To reconnect, follow [the Begin MCP setup guide](/for-managers/integrations/mcp) and authorise the client again.
Session, passkey and MCP grants are self-service and account-scoped. Revoke-all-other-sessions uses the server’s current-session identity. Passkey deletion counts email, phone, linked social accounts and passkeys as sign-in methods; there is no password and no TOTP or SMS second factor to enable. This page does not manage another person’s credentials or workplace clocking terminals.
## Next
Keep your sign-in contacts current.
Download your personal records.
## Still need help?
Email the Begin team and we'll get back to you.
Open the AI assistant and get instant answers based on these docs.