Security & Access
Manage account sessions, passkeys, passwords, and access controls.
Overview
Security & Access lets you review devices signed into Attia, manage the sign-in protection on your account, and create personal API keys.
Screenshot coming: Attia settings showing the security and access page
Open Settings > Security & access to view sessions, add passkeys, generate backup codes, manage your password, create and revoke personal API keys, and clear the data Attia keeps in this browser.
Sessions
The Sessions section shows your current session and any other active sessions for your account. Each row shows the browser and device, the IP address and location when Attia has them (otherwise Unknown location), and when the session was last active.
Your current session is marked Current session. Use Log out to end it.
For other active sessions, use Revoke on an individual row to remove that device's access. Use Revoke all to revoke every other active session while keeping your current session signed in.
Attia only shows active sessions here.
Passkeys
Passkeys let you sign in securely without relying on a password. They are supported by major browsers, operating systems, and many password managers.
Use New passkey to register a device or password manager. You can register more than one passkey. Existing passkeys show their label, when they were created, and when they were last used.
Attia may ask you to reverify your identity before adding a new passkey.
Two-step verification
The Two-step verification section shows whether an authenticator application is enabled for your account. It also shows whether backup codes have been generated.
Use Generate to create backup codes. If backup codes already exist, use Regenerate to replace them. Attia may ask you to reverify your identity first. Store backup codes somewhere safe because each code can only be used once.
Password
The Password section shows whether your account has a password. Use Set password or Change password to open the secure account settings flow.
Personal API keys
Personal API keys belong to you and to the workspace you create them in. Anything done with a key is attributed to you.
Use New API key to create one. Give it a Key name, then choose its Permissions: Full access, or Only select permissions… from Read, Write and Admin. Under Team access, keep All teams you have access to or pick Only select teams…. Attia shows the key once, when you create it, so copy it straight away.
Each key in the list shows its name, when it was created, when it was last used, its access level and its teams. Use Revoke in a key's menu to stop it working.
New API key only appears when the workspace's API key creation setting in Settings → Security allows you to create keys. It allows every member except guests unless the workspace has narrowed it to admins.
Authorized applications are planned for third-party OAuth applications that can access your account after you approve them.
This section is shown as Coming soon until OAuth application access is available. When it is available, you will be able to review approved applications and revoke access you no longer want to grant.
Local data on this device
Attia keeps a read cache of your workspace data in this browser. Use Clear local data to delete it. This does not delete anything on the server or sign you out, and Attia loads the data from the server again when it needs it.