You are reading the documentation of FileRun 2026.4.0, which is not released yet. It is subject to change, so do not use it for planning. Read this page for FileRun 2026.3.0

Your account settings🔗

Account settings is where you change your own details, your password and the way you sign in. It is a different place from the control panel, which is for administrators.

To open it, click your name in the bottom left corner of the interface and choose Account settings. Back to your files returns you to the file list.

The menu on the left has these pages:

• Profile
• Password
• Two-factor authentication
• Linked accounts
• Sessions
• Connected apps

Which of them you see depends on what your administrator allows your account to change. If a page described here is missing, your account is not allowed to change that. Profile needs the permission User can change personal information. Password, Two-factor authentication and Linked accounts need User can change authentication settings.

Every page except Profile asks you to confirm who you are before it opens, unless you did so a short while ago.

Note

The way the file list looks is not set here. It is chosen by the administrator for the whole installation.

Profile🔗

The page has three parts. Save changes saves the name, the phone and the preferences; the picture is saved as soon as you upload it.

Name and picture

• Name — your first and your last name, as other users see them.
• Profile image — click the picture to upload a new one. It must be a PNG or a JPG file, and you can crop it before saving. Reset removes it.

Contact

• E-mail address — shown here, with a Change button, or Set when the account has none. See below.
• Phone — a phone number, if you want to record one.

Preferences

• Language — the language of the e-mail messages FileRun sends you. Saving another one also switches the interface of this browser to it. With Default language, the messages follow the default language of the installation. See Translating FileRun.
• Send me e-mail notifications — a single switch for the messages FileRun sends you about what other people do with your files. With it ticked you are told when another user downloads one of your files, copies or uploads a file into one of your folders, updates one of your files, shares a file or a folder with you, or comments on or tags one of your items, and when your storage quota is nearly used up. The help next to the checkbox lists them.

Notifications for one particular folder are set elsewhere, by right-clicking that folder. See The e-mail notification system.

E-mail address🔗

Changing your e-mail address takes two steps, because FileRun checks that the new address really reaches you. FileRun asks you to confirm who you are first.

1. Type the new address and click Proceed. A verification code is sent to the new address.
2. Type the code and click Proceed again.

The code is valid for ten minutes. If you get it wrong five times, the process starts over. An address already used by another account is refused. Codes can be waiting for at most five addresses at a time, so after a few mistyped addresses you have to wait for the oldest code to expire.

Cancel returns you to Profile.

Password🔗

Type the new password and save.

Two things are worth knowing:

• Changing your password signs out your other browser sessions. The one you are using stays signed in.
• Changing your password does not stop your app passwords and connected apps from working. If you think somebody else had access to your account, revoke those as well under Connected apps.

If your account has no FileRun password, because it signs in through your organization's login system, this page is not shown.

Two-factor authentication🔗

Passkeys, Authenticator app and Recovery codes are grouped on this page. They decide what FileRun asks for besides your password when you sign in.

• Passkeys — sign in with your fingerprint, your face, your device PIN or a USB key. Add one for every device you use often.
• Authenticator app — six digit codes from an app on your phone.
• Recovery codes — ten single-use codes to fall back on if you lose your phone or your key. They are shown once, so save or print them when you generate them.

What each method does, in which order FileRun asks for them, and what to do if you lose access, is described on Two-factor authentication.

When an authentication plugin is enabled on the installation, the page is shown only if the administrator ticked Allow users to protect their accounts with two-factor authentication.

Linked accounts🔗

The identity providers your account can sign in through, such as your organization's single sign-on, each with a Link or an Unlink button. The page is shown only when the administrator has set up such a provider, or when your account is already linked to one.

• Link sends you to the provider to sign in there. Back in FileRun, the provider's account is linked to yours, and you can sign in with it from then on.
• A linked account shows its ID at the provider, when it was linked and when it was last used. Unlink removes the link.
• A link whose provider is no longer available signs nothing in. It is listed so that you can remove it.

The last way into your account cannot be removed: without a FileRun password, a link can be removed only while another one, through a provider that is still enabled, remains.

Sessions🔗

The browsers currently signed in to your account, each with the browser and operating system, the IP address it connects from and when it was last used. The one you are reading this in is marked This session.

Sign out anything you do not recognize with the button on its row. The session you are using cannot be signed out from here; use Sign out for that.

Only browser sessions are listed. Applications connected with an app password are under Connected apps.

Connected apps🔗

The applications that reach your account without a browser: WebDAV clients, the desktop sync app, the mobile apps, and anything that was authorized through the API. Each of them can be cut off from here, one at a time.

An app that you approved in the browser is listed here without you having done anything else. For an app that asks you for a username and a password, this is where you create them. See App passwords.

The page is not shown to guest accounts, nor when the administrator has turned off all three of Enable API, WebDAV and Mobile and desktop apps.