User Guide
Profile Settings
Manage your Kaya profile, password, two-factor authentication and linked identity.
Open the avatar menu and select Profile Settings. Any authenticated user can update supported personal details and manage their own local security controls.
Use a unique password of at least 12 characters. TOTP enrolment displays a secret/QR flow and requires a valid code before activation. Removing TOTP weakens local account and Secret Vault protection and may be blocked by policy or unavailable for OIDC-only users.
When OIDC is configured, the profile shows the linked external identity and controlled link or unlink actions. Kaya prevents an unlink that would leave the account without a usable authentication method. Admin-created link invitations expire after 30 minutes.