Account and security

What you will achieve

You will keep your account safe and know what each security step does.

Create and verify an account

1. Open the sign-up page and enter your Name, Email and Password (at least 8 characters).
2. Phynxa emails a 6-digit code. Enter it as the Verification code on Verify your email and choose Verify email.
3. If the code does not arrive, choose Resend code (there is a short wait between sends, and 5 requests per 10 minutes at most).

Signing up creates your own workspace, and you are its owner. See Create your account.

Sign in

Use your email and password. Too many failed attempts pause sign-in for a short while: 20 attempts per minute per network address, and 6 per minute for one account.

Reset a forgotten password

1. On the sign-in page choose Forgot password? and enter your Email on Reset your password.
2. Enter the 6-digit Reset code we email you, type a New password (at least 8 characters) and choose Reset password.

The same message is shown whether or not the email has an account, so nobody can use the form to find out who is registered. Reset requests are limited to 5 per 10 minutes per address, and 3 per 10 minutes per account.

Change your name or password

Open Settings, tab Profile & Account.

• Full Name and Phone Number (with your country code; it is not verified and not shown to your team), then Save Profile. Your email address is shown but cannot be changed here.
• Security & Password: enter your Current Password, a New Password (at least 8 characters) and Confirm New Password. Changing it signs you out on every other device.

Rename your workspace

Your workspace is created for you when you sign up, named after you. Owners and admins can change the name: open Settings, tab Profile & Account, edit Workspace name and choose Save Workspace. The name is shown to your team and in the workspace switcher. It can be up to 60 characters, and it must differ from the name of any other workspace you belong to. Members see the name but cannot change it.

Workspace ID is shown beside it. It is unique to your workspace, it never changes when you rename it, and it is the number to quote when you contact support. Use Copy to copy it.

Developer keys and sessions

API keys for your own code are created under Developer API Keys (see API keys). Treat them like passwords and revoke any that may have leaked.

Delete your account

Under Danger Zone, Delete Account removes your profile and all agents, calls, contacts and keys. It cannot be undone. Only the workspace owner can do this. You must type DELETE and enter your password, then choose Permanently Delete.

Warning. If you are the owner, deleting removes the workspace's data for everyone in it. Export what you need first.

How your data is handled

• Passwords are stored hashed, never in plain text.
• Credentials you store (phone provider keys, integration secrets, webhook secrets, tool authentication values) are encrypted at rest and cannot be read back; the page shows Configured instead.
• Everything is scoped to your workspace; another workspace cannot read it.

Expected result

You can sign in, reset a password with an emailed code, and see the changes take effect.

Troubleshooting

• "It looks like you've tried too many times" means a rate limit. Wait a few minutes and try again; the password is not the problem.
• No verification email. Check spam and resend. Email sending is run by the platform; if it never arrives, contact support.
• Signed out everywhere after a password change. Expected.

Related guides

• Team and roles
• Limits and quotas