Skip to main content
Go to your account settings: Open Account Settings
Your account security settings are found in Settings > Account from the sidebar. This is where you manage your password, two-factor authentication, active sessions, and account deletion.

​
Change Your Password

1

Go to Account Settings

Click your profile icon in the top right corner, then click Account Settings. Or go to Settings in the sidebar.
2

Find the Password section

Scroll down to the Change Password section.
3

Enter your current password

Type your existing password to verify it’s really you.
4

Enter your new password

Type a new password. It must be at least 8 characters. We recommend using a mix of letters, numbers, and symbols.
5

Confirm and save

Type the new password again to confirm. Click Change Password.
After changing your password, you’ll receive a confirmation email. All other sessions stay logged in — if you suspect someone else has access to your account, revoke all sessions (see below) after changing your password.

​
Enable Two-Factor Authentication (2FA)

Two-factor authentication adds a second layer of security. After entering your password, you’ll also need a 6-digit code from an authenticator app on your phone.
1

Go to Account Settings

Navigate to Settings > Account.
2

Find the Two-Factor Authentication section

Click Enable 2FA.
3

Scan the QR code

Open your authenticator app (Google Authenticator, Authy, or Microsoft Authenticator) and scan the QR code shown on screen.
4

Enter the 6-digit code

Your authenticator app will show a 6-digit code. Enter it to verify the setup works.
5

Save your backup codes

You’ll be shown a set of one-time backup codes. Save these somewhere safe — a password manager, a printed sheet in a safe, or a secure note. If you lose your phone, these codes are the only way to get back into your account.
If you lose your phone and don’t have your backup codes, you will be locked out of your account. There is no way around this — it’s what makes 2FA secure. Save those backup codes.
Any TOTP-based authenticator app works: Google Authenticator, Authy, Microsoft Authenticator, 1Password, Bitwarden. We recommend Authy because it backs up your codes to the cloud.
Go to Settings > Account, find the Two-Factor Authentication section, and click Disable 2FA. You’ll need to enter a 6-digit code from your authenticator app to confirm.

​
Active Sessions

See every device and browser currently logged into your account. This is useful for:
  • Checking if you accidentally left yourself logged in on a shared computer
  • Spotting any logins you don’t recognise (which could mean someone else has your password)
  • Logging out of old devices remotely
1

Go to Account Settings

Navigate to Settings > Account.
2

Scroll to Active Sessions

You’ll see a list of all logged-in sessions, showing the device type, browser, location, and when it was last active.
3

Revoke a single session

Click Revoke next to any session to log it out. The person using that session will be returned to the login page.
4

Revoke all sessions

Click Revoke All to log out every session except the one you’re currently using. Do this if you think your account has been compromised.
Your current session is marked with a “Current” badge so you know which one is you. You can’t accidentally revoke your own active session.

​
Delete Your Account

Account deletion is permanent, but includes a 30-day grace period.
1

Go to Account Settings

Navigate to Settings > Account.
2

Scroll to the Danger Zone

At the bottom of the page, find the Delete Account section.
3

Click Delete Account

A confirmation dialog will appear.
4

Type DELETE to confirm

Type the word DELETE (in capitals) into the text field. This prevents accidental deletion.
5

Click Confirm Deletion

Your account enters a 30-day grace period.
During the 30-day grace period, your account is deactivated but not destroyed. Your AI receptionist stops answering calls immediately. If you change your mind, log back in within 30 days and your account will be reactivated with all data intact. After 30 days, everything is permanently deleted and cannot be recovered.

​
What gets deleted:

  • Your account and login credentials
  • All business data (leads, calls, appointments, knowledge base)
  • All call recordings and transcripts
  • Your AI receptionist configuration
  • Your phone number (released back to the pool)
  • Your billing information (Stripe subscription is cancelled)

​
What is NOT deleted:

  • Emails already sent to customers (those are in their inboxes)
  • Data already synced to your CRM (that’s in your CRM’s system)
  • Calendar events already created (those stay on your Google/Outlook calendar)

​
Frequently Asked Questions

Use one of the backup codes you saved when you enabled 2FA. Each code can only be used once. Go to the login page, enter your email and password, then click “Use a backup code” instead of entering a 6-digit code. If you’ve used all your backup codes and lost your phone, contact support at support@closethecall.com with proof of identity — we’ll manually verify your account and help you regain access.
Not currently. Each team member enables 2FA on their own account independently. We recommend that all users with Manager or Owner roles enable 2FA, but it cannot be enforced at the account level. This is on our roadmap.
Go to Settings > Account and update the Email field in the Profile section. You’ll receive a verification email at your new address. Click the link in that email to confirm the change. Your old email will no longer work for login after verification.
Yes. All data is encrypted in transit (TLS/HTTPS) and sensitive fields like API keys and tokens are encrypted at rest using AES-256 encryption. Passwords are hashed with bcrypt (12 rounds) and are never stored in plain text. Password reset tokens are hashed with SHA-256 before storage.