Skip to Content
How-to guidesHow-to guidesProfile, password, passkeys

Manage profile, password, and passkeys

/settings is the personal-account surface. Everything here applies to your dashboard session, not your agents.

Display name

The first card. Input field, edit it, click Save. A “Display name updated” toast confirms.

Display name appears in the audit log next to actions you took as the owner (e.g., approvals you actioned).

Email and password

Both managed by Clerk. The dashboard surfaces:

  • Your current email (read-only here)
  • An Account Management → button that opens Clerk’s hosted user profile

In Clerk’s profile, you can:

  • Change primary email (verifies the new address before switching)
  • Change password (or remove it, if you’ve added a passkey)
  • Add or remove social connections (GitHub, etc.)
  • Sign out of other sessions
  • Delete your Clerk identity (this also soft-deletes your AgentValet owner)

The Password card in AgentValet also has a Change password button that opens a modal with New password and Confirm password fields. It’s a shortcut into the Clerk flow.

Passkeys

PasskeysCard on /settings. Lists every passkey registered against your owner, with a delete button per entry.

To add one:

  1. Type a label (“MacBook Touch ID”, “YubiKey”, “iPhone”)
  2. Click Register
  3. The browser/OS prompts for biometric or hardware key setup
  4. The credential is stored against your owner record

Once registered, the device can:

  • Approve actions via biometric on /approvals and /m/approvals/:id
  • Approve via biometric on magic-link approval pages (/approve?token=...)

Passkeys do NOT yet replace your dashboard sign-in — Clerk’s hosted flow is the only sign-in path today. Passkey-based dashboard login is on the roadmap.

Why passkey over password

Two reasons:

  1. It can’t be phished. A passkey is bound to the origin. Even a perfect-looking spoofed /approve?token=... page can’t trick your device into signing.
  2. It can’t be reused if it leaks. Each device’s credential is unique to that device.

If you’re going to register one passkey, register it on the device you most often use for approvals (probably your phone).

Signing out

Top-right user menu → Sign out. Clears your Clerk session everywhere, so other devices will be signed out on their next request.

Your agents are unaffected — they sign with their own keys, not your session.

Next

Read agent self-reportsOwner ID & Proxy URL