Settings
The signed-in account page at /settings: one long page of sections, plus a sub-page for each edit. Any settings URL is also an entry point: a signed-out visitor is sent through sign-in and back.
Map
Screens
| Route | Screen | Purpose |
|---|---|---|
/settings | PageSettings | Profile, Security, Connected services, Linked accounts, Data collection, Delete account. |
/settings/display_name | PageDisplayName | Display name. |
/settings/avatar, /settings/avatar/change | PageAvatar | Profile picture. The change path is a redirect kept for Firefox. |
/settings/emails, /settings/emails/verify | PageSecondaryEmailAdd | Add and confirm a secondary email. |
/settings/change_password | PageChangePassword | Change password. Also the target of /.well-known/change-password. Accounts without a password are redirected to /settings/create_password. |
/settings/create_password | PageCreatePassword | First password for a passwordless or Google/Apple account. |
/settings/passkeys/add | PagePasskeyAdd | Register a passkey. |
/settings/account_recovery | PageRecoveryKeyCreate | Create or replace the account recovery key. |
/settings/two_step_authentication | Page2faSetup | Enable two-step authentication and choose a backup method. |
/settings/two_step_authentication/change | Page2faChange | Switch authenticator app. |
/settings/two_step_authentication/replace_codes | Page2faReplaceBackupCodes | New backup codes. Linked from the low-codes email. |
/settings/recovery_phone/setup, /settings/recovery_phone/remove | PageRecoveryPhoneSetup | Add or remove the recovery phone. |
/settings/recent_activity | PageRecentActivity | Security event history. |
/settings/clients | ConnectedServices | Redirects to the Connected services section of /settings: devices and services with access. |
/settings/delete_account | PageDeleteAccount | Delete the account. |
/security_events, /secondary_email_verified | legacy | Older screens replaced by Recent activity and Settings. |
Notes
- Sensitive edits are wrapped in an MFA guard: an old or low-assurance session is sent to the matching sign-in step and returned to Settings.
- A Sync client that reaches Settings without a valid session sees SignoutSync, asking the user to sign out of Sync manually.