> ## Documentation Index
> Fetch the complete documentation index at: https://docs.casebender.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Profile

> Manage your identity, avatar, password, and multi-factor authentication settings in CaseBender.

## Overview

Your profile contains the identity and authentication settings associated with your CaseBender account. Open **Settings**, expand **Account**, and select **Profile** to manage these settings.

The options available on this page depend on how you authenticate. Accounts managed by an external identity provider might not display local password controls.

## Update your avatar

<Steps>
  <Step title="Open your profile">
    Open **Settings**, expand **Account**, and select **Profile**.
  </Step>

  <Step title="Choose an image">
    Select your current avatar and choose an image from your device.
  </Step>

  <Step title="Confirm the update">
    Wait for the upload to complete. The new avatar is applied to your active session and other places where your identity is displayed.
  </Step>
</Steps>

<Note>
  If an avatar upload does not complete, retry with a supported image file or contact your CaseBender administrator.
</Note>

## Change your display name

The **Display name** section controls the name shown to other users.

<Steps>
  <Step title="Enter your name">
    Enter a **First name** and **Last name**. Each value must contain at least two characters.
  </Step>

  <Step title="Save the profile">
    Select **Save**. CaseBender updates the name in your active session after the change succeeds.
  </Step>
</Steps>

## Change your password

The **Password** section is available only to accounts that use a local CaseBender password. For accounts managed through SSO or another external identity provider, change your password through that provider.

<Note>
  Manually provisioned accounts with **Require password change** enabled are redirected to change the temporary password before normal CaseBender access.
</Note>

<Steps>
  <Step title="Enter your current password">
    Enter the password you currently use to sign in.
  </Step>

  <Step title="Create a new password">
    Enter and confirm a password that contains:

    * At least eight characters
    * At least one lowercase letter
    * At least one uppercase letter
    * At least one number
    * At least one special character
  </Step>

  <Step title="Save the password">
    Select **Save**. If the current password is incorrect or the new values do not match, correct the highlighted field and try again.
  </Step>
</Steps>

<Warning>
  Never reuse a password from another service. If your organization uses SSO, follow its identity-provider password policy instead.
</Warning>

## Configure multi-factor authentication

The profile page provides controls for supported multi-factor authentication methods:

* **Authenticator app (TOTP)** for time-based verification codes
* **WebAuthn/FIDO2** for compatible security keys and platform authenticators
* **Backup codes** where offered during MFA enrollment

Follow the prompts in the relevant security card to enroll or manage a method. Your organization can require MFA as part of its authentication policy.

For method details and recovery guidance, see [Authentication](/security/authentication).

## Access and permissions

* Every authenticated user can open their own profile.
* You can update your own name, avatar, and local password.
* Super Admins and Organization Admins can update selected profile fields for users they administer.
* The server validates authorization even when a control is visible in the interface.

## Troubleshooting

### The Password section is missing

Your account likely authenticates through SSO, LDAP, or another external provider and does not have a local CaseBender password. Use your identity provider to manage the password.

### My current password is rejected

Confirm that you entered the current local password rather than an SSO password. If you cannot recover access, contact your administrator.

### My profile change was not saved

Check the validation message, confirm that your session is still active, and retry. Name fields require at least two characters.

## Security recommendations

* Enroll in the strongest MFA method permitted by your organization.
* Prefer phishing-resistant WebAuthn credentials when available.
* Store backup codes in an approved password manager or secure vault.
* Review unexpected profile changes with your administrator.

## Related guides

* [Authentication](/security/authentication)
* [Access Control](/security/access-control)
* [Members](./members.mdx)