Four screens under Personal settings. Three take a minute each. The fourth is the one worth teaching your team to look at.
Account
Settings → Account — profile and preferences.
- Your photo. Up to 2 MB, images only.
- Your name and email address. The email shows whether it is verified.
- Account status.
- Change password — current password, new one, confirm.
The password change lives here, not on the Security screen, even though the menu describes Security as "password and sign-in". If somebody on your team cannot find where to change their password, this is where to send them.
Theme
Settings → Theme — brand and colours. Four tabs:
| Tab | Sets |
|---|---|
| Brand | Logos and brand assets |
| Colors | Separate light mode and dark mode palettes |
| Layout | Layout options |
| Typography | Fonts |
Two practical notes:
- Images are at most 2 MB and must be images. The screen rejects anything else before uploading.
- An uploaded image is a preview until you save. It says "Image ready. Click Save to upload." — leaving the page before saving keeps the old logo, and the preview you were looking at was local to your browser.
Set both palettes, not just the one you use. A logo chosen against a white background and never checked against dark mode is the most common way a branded workspace ends up with an invisible logo for the half of the team who work in dark.
There is also Reset to defaults, which discards the customisation entirely.
Security
Settings → Security monitors identity activity — sign-in patterns, suspicious access, and security-sensitive events, filtered by date, user or tenant. It is covered in chapter 15 alongside the audit trail, which is what it is a specialised view of.
It is not where you change your password. See Account, above.
Sessions
Settings → Sessions — active devices. This is the short screen that is actually a security control, and almost nobody opens it.
Each row is a session: the device, the IP address, when it signed in, its last activity, and its status — active or expired. The one you are using is marked This device.
Counts at the top break the sessions down by desktop, mobile and tablet.
Two actions:
- Revoke one session. The device is signed out.
- Sign out everywhere else — revokes every session except the one you are on.
When to actually use it
- After losing a device. This is the fastest thing you can do, and faster than asking an administrator.
- After using a shared or borrowed computer, if you are not certain you signed out.
- When a row is a device or a place you do not recognise. Revoke it, then change your password on the Account screen — in that order, because revoking first ends the session the other person is using.
"Sign out everywhere else" costs you nothing. Your current session survives; every other one ends. When in doubt, use it — the worst outcome is signing in again on your phone.
What you should have now
- A photo and a verified email, so colleagues can tell who is who on a case.
- Both theme palettes set, and the logo checked in dark mode.
- Your sessions list opened once, and every device on it recognised.
- Your team told two things: the password is on Account, and Sessions is what you open first if a laptop goes missing.