Your profile and sign-in security

Before you start

• You can sign in to Zonitix. Nothing else is needed: everyone has a profile page.
• Adding a passkey needs a device with a fingerprint reader, Face ID, a PIN or a security key.

See your account

1. 1

   Step 1: Open My Profile

   Click My Profile at the bottom of the left menu. The page shows your name, username, department and status, the roles you hold, and the groups you are in.

   You cannot change roles or groups here. If something is wrong, ask your administrator.

Manage how you sign in

1. 2

   Step 2: Find Sign-in & security

   Scroll to “Sign-in & security”. It lists your passkeys, your authenticator app, your recovery codes and your trusted devices.

2. 3

   Step 3: Add or remove a passkey

   A passkey is a sign-in stored on your device and unlocked with your fingerprint, face or PIN. Click “ADD PASSKEY” and follow your browser’s prompt. Add one on a second device too, so losing one does not lock you out.

   To remove one, use the remove button next to it. Zonitix will not let you remove your only sign-in factor: add another first.

3. 4

   Step 4: Keep recovery codes

   Recovery codes get you in when you have lost your phone or passkey. Under “Recovery codes” you can see how many you have left. Click “GENERATE CODES” (or “REGENERATE” to replace them) and confirm. You get 10 single-use codes, shown once. Download or copy them and keep them somewhere safe. Replacing them makes the old ones stop working at once.

4. 5

   Step 5: Review trusted devices

   A trusted device is a browser where you ticked “Trust this device for 30 days”, so it skips the second step. The one you are using is marked “This device”. Click “Revoke” next to any you no longer use or do not recognise, or “REVOKE ALL”; each will ask for your second factor at its next sign-in.

Change your password

1. 6

   Step 6: Ask an administrator to expire it

   There is no password field on “My Profile”, and no screen where you change your own password while signed in. Ask your administrator to expire your password. They do it from AdministrationUsers with the key button on your row.

   You are signed out on every device. The next time you sign in, a window titled “Password Change Required” opens. Enter the new one in “New Password” and “Confirm New Password” and click “Update Password”, then sign in with it.

   If yours is the primary administrator account (the one created during setup), nobody can expire your password: the key button on your row is greyed out for every administrator. What does ask you for a new one is saving a new or edited password policy that covers your account, under Security & ComplianceSecurity SettingsPassword Policies. The “STANDARD POLICY” covers everyone who has a Zonitix password, you included, so saving a change to it asks all of them for a new password at their next sign-in; warn people first. A policy tied to groups asks only the members of those groups. See Password policy and sessions.

   If you sign in through Okta, Entra or Google, you have no Zonitix password. Change it in that system instead.

Download your personal data

1. 7

   Step 7: Request the export

   Under “GDPR / Privacy Compliance”, click “REQUEST PII EXPORT (SAR)”. (PII means personal data; SAR means a request for a copy of it.) A file ending in .json (plain text that any text editor opens) with the personal information and activity records Zonitix holds about you downloads to your computer.

What you should see

If something goes wrong

The remove button on a passkey is greyed out: "This is your only sign-in factor — add another before removing it"

Add a second passkey or an authenticator app first, then remove the old one.

You lost your device and have no recovery codes

Ask your administrator to reset your MFA. You set up a second factor again, and get new codes, the next time you sign in.

You forgot your password

On the sign-in page, click FORGOT PASSWORD? SIGN IN WITH MAGIC LINK to get a sign-in link by email, if your company has email set up. The link signs you in but does not change the password, so ask your administrator to expire it as in step 6, then use the sign-in link once more: it opens the Password Change Required window, where you choose a new password. The primary administrator account cannot be expired; step 6 says what that account does instead.

"Failed to generate PII export."

Try again in a moment. If it keeps failing, tell your administrator. There is no button for exporting another person’s data; your administrator needs a helper who can call the Zonitix API, as step 2 of Handle a personal-data request sets out.

Still stuck? See When something goes wrong, or Contact Zonitix support.

Where next

• See and edit your own details
• Your to-do list
• Check and adjust MFA
• Help someone who is locked out