Settings
A reference for every section in Settings — profile, account, notifications, defaults, billing, API keys, and MCP keys.
Settings is organized into focused sections. This page is a map of what each one controls.
Profile
Your display name and avatar. The avatar supports uploading a photo with an interactive crop, or removing it to fall back to initials. Your display name and photo appear in the sidebar and, in teams, next to your activity.
Account
Your email (managed by your authentication provider) and sign-out. Email is shown for reference and is not editable here.
Notifications
Email notification preferences — e.g. project updates and task-assignment notifications.
Date & Time
Timezone and date format preferences, applied across the app's date displays.
Time Tracking
Preferences for the automatic task timer (see Tasks → time tracking).
Project Defaults
Defaults applied to new tasks and milestones — default category, priority, and milestone duration — so manual creation matches how you work.
Billing & Subscription
Your current plan and status, credit balance and reset date, purchase history, and actions to upgrade, cancel, or reactivate. Billing is processed by Polar. See Plans & Credits.
API Keys (Bring Your Own Key)
Connect your own Anthropic, OpenAI, or Gemini key, choose the active provider, and toggle BYOK on/off. Available on every plan. While BYOK is on, your sprintrr credits are paused. See Bring Your Own Key.
Security
Two-factor authentication (TOTP), backup codes, and "sign out everywhere" live in this section. Recommended for every account, required for admin accounts.
Enroll TOTP
- Open Settings → Security and choose Enable two-factor.
- Scan the QR code with an authenticator app (1Password, Authy, Google Authenticator, etc.) or paste the secret manually.
- Enter the 6-digit code to confirm enrollment. We immediately issue 10 single-use backup codes — print or store them somewhere safe; they're shown once and never displayed again.
Sign-in flow when MFA is enrolled
After you enter your password, sprintrr shows a second screen asking for the 6-digit code from your authenticator. Once verified, you're signed in at AAL2 (Authenticator Assurance Level 2) and routed to the dashboard or your original destination. If you don't have your authenticator handy, click Use a different account to drop back to the password screen.
Admin accounts require AAL2 to access /admin/*. Before this in-flow step-up existed, an MFA-enrolled admin signing in with password landed on the dashboard at AAL1 and was bounced with a ?security=admin_mfa_required banner; that bounce no longer fires because the step-up completes during sign-in.
Backup codes
Each backup code is single-use and consumed when used. Regenerate the whole batch from this section at any time — regeneration requires a fresh AAL2 step-up so we know it's actually you.
If you lose access to both your authenticator and all backup codes, contact support@sprintrr.ai — recovery is manual and intentional, and may require identity verification.
Sign out everywhere
Revokes every refresh token across every device — your current session included. Useful if you suspect a session was compromised, after a lost-device incident, or before transferring an account. After clicking, you'll be returned to the sign-in screen on this device.
MCP Keys
Create and revoke API keys for the MCP integration — used by Claude Desktop, Cursor, or direct HTTP clients. Up to 10 keys per account; each shows its name, prefix, last-used time, use count, and expiry. The full key is shown once at creation.
Data Privacy
Data retention and export/delete options for your account data.