Your account and security

  • Product
  • All four levels

Your Account shows your name, your email and every organisation you belong to, with your level in each. From there you sign out or close your account. Sign-in itself is protected by a required second step for password accounts: an authenticator app or an emailed code, asked at most once per 12-hour session.

What this is

Your account is you, not your organisation. One account can belong to several organisations, with a different level in each, and closing it ends every one of those memberships at once.

Security is mostly handled before you reach StedOS. You sign in on Sted’s sign-in service at auth.sted.digital, and the app receives a session, never your password. Password accounts must use a second step; Google accounts rely on Google’s own sign-in. A web application firewall in front of StedOS rate-limits its requests, with a tighter limit on sign-in.

Where to find it

Your Account is at the foot of the sidebar, beside Feedback and Logout. Change Organisation sits in the group named after your organisation, and appears only if you belong to more than one.

On a phone, the sidebar sits behind the Menu button.

How it works

What Your Account shows

The page shows your Name and Email, then Your memberships: each organisation with your level and whether that membership is active, suspended or retired. You read these here; you do not edit them.

Switch organisation

  1. Open Change Organisation.
  2. Find the organisation you want.
  3. Select Switch.
  4. Confirm the switch.

You land on that organisation’s Home, with your level there.

Sign out

  1. Open Your Account.
  2. Select Sign out.

Logout at the foot of the sidebar does the same after a confirmation.

Close your account

  1. Open Your Account.
  2. Select Close account.
  3. Read the warning in Close your account.
  4. Select Close my account.

Closing ends your account everywhere, not only at the organisation you have open, signs out every session, and cannot be undone from inside Sted. If you are the only administrator of an organisation, Sted refuses until someone else is made an administrator.

An administrator cannot close someone else’s account. To remove a person from one organisation, they retire their membership instead.

Forgotten password

Sign out, then use the forgotten-password link on the sign-in page to get a six-digit reset code by email. If your second step is an emailed code, the sign-in service cannot send you one, so Sted support resets the password.

Permissions

Everything on Your Account is about you, so every level has the same rights:

ActionAdministratorPolicy and Process OwnerReviewerPersonnel
See your name, email and membershipsYesYesYesYes
Sign outYesYesYesYes
Switch organisationYesYesYesYes
Close your own accountYes, unless the only administratorYesYesYes
Close someone else’s accountNoNoNoNo

Change Organisation is not drawn for someone with only one membership.

Limits and plan features

Changing your password inside Sted is not available yet. Your name, email address and second-step method cannot be changed from Your Account yet either.

Each person can create one organisation of their own; more come by invitation.

Frequently asked questions

How do I change my password in Sted?

Not from inside Sted yet. Sign out, then use the forgotten-password link on the sign-in page, which emails you a reset code. If your second step is an emailed code, ask Sted support to reset it instead.

What happens to my organisation if I close my account?

It carries on without you, as long as it has another administrator. Sted refuses to close the account of the only administrator of an organisation, so make someone else an administrator first.

Can I switch from emailed codes to an authenticator app?

Not from inside Sted yet. The choice is made on the sign-in page the first time you sign in, and Your Account has no setting to change it.

How often does Sted ask for my second-step code?

At most once every 12 hours on a password account. Google accounts are never asked by Sted, because Google’s own sign-in protects them.