Everything account-related lives under Settings.
Profile
Name, email, phone, company — used for invoices and domain registration contacts. Keep them current; domain WHOIS pulls from here.
Security
Change your password anytime; sessions on other devices revoke on change. We hash passwords with bcrypt and never store them readably.
API access
Generate API keys for integrations under Settings → API. Keys can be revoked individually.