Skip to main content

Your account

Your account settings live under the profile menu (bottom-left) at https://writemars.com/profile/settings, in five sections: General, Preferences, Notifications, Security, and API Tokens. These are personal — workspace-wide options live in workspace settings.

General​

  • First name (required), Last name, and Display name (required) — display name is what teammates see across the app.
  • Email is read-only; contact support to change it.
  • Your avatar is generated from your initials.
  • Deactivate account isn't self-serve yet — the button points you to support.

Preferences​

  • Theme — System preference, Light, or Dark.
  • Language — the UI language.
  • Time — your timezone for dates and schedules.

Language and timezone are saved in your current browser.

Notifications​

Account-backed controls for workspace notifications — covered in notifications. You can turn in-app notifications and operational emails on or off, then mute email groups for approvals, comments, publishing results, or account-safety events.

Security​

Manage how you sign in. WriteMars accounts support four sign-in methods:

  • Email + password
  • Magic link (emailed one-time link)
  • Google
  • GitHub

If you signed up with Google, GitHub, or a magic link, your account has no password yet — Set password adds one so email + password works too. Change password rotates an existing one. New passwords must pass a strength check.

WriteMars also records security events on your account (sign-ins, failed attempts, password changes) server-side, and signed-in sessions expire automatically.

API Tokens​

Personal access tokens for the REST API and MCP server live under Profile → API Tokens. Use them for scripts, integrations, and AI-agent clients.

When creating a token:

  • give it a recognizable name, such as local-codex or weekly-report-script;
  • optionally scope it to one workspace;
  • copy the secret immediately, because it is shown only once;
  • revoke tokens you no longer use.

Creation, scoping, and revocation are covered in API authentication.