> For the complete documentation index, see [llms.txt](https://wiki.crosswatch.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.crosswatch.app/crosswatch/profile.md).
# Profile
The **Profile** page is your personal CrossWatch home and account-management area. Open it from the profile icon at the end of the navigation, or visit `/profile`.
It is available to administrators and managed users. The page combines:
* A personal activity overview
* Account and security controls
* Personal preferences, where available
{% hint style="info" %}
The **Profile** page is not a **User Profile**.
A Profile page manages the signed-in account. A User Profile defines a managed user's delegated CrossWatch resources.
See [Managed users](/crosswatch/settings/connections/managed-users.md) to configure User Profiles and managed-user accounts.
{% endhint %}
### Profile page and User Profile
```
User Account
├── Profile page
│ ├── Personal overview
│ ├── Account settings
│ └── Security
└── Assigned User Profile
└── Delegated CrossWatch resources
```
Changing the Profile page never changes a User Profile assignment or Access Mode.
| Feature | Purpose |
| ---------------- | ---------------------------------------------------------------- |
| **Profile page** | Personal overview, identity, security, and preferences |
| **User Profile** | Delegated provider instances, Sync Pairs, Watchers, and Webhooks |
| **Access Mode** | Read Only or Full Access within the delegated scope |
For managed users, the assigned User Profile determines the data shown. The Profile page does not expose another user's delegated resources.
Administrators use their normal CrossWatch scope. They are not assigned to a managed User Profile.
### Overview
The **Overview** tab provides a personal summary of CrossWatch activity. Available sections can include:
* Now Playing, Last Watched, and Continue Watching
* Recent Watchlist and Recent Activity
* Quick Stats and connected services
The header can show the profile picture, display name, username, account type, member date, and activity information.
### Security
The **Security** tab is available to administrators and managed users. It controls only the signed-in account.
Read Only limits normal CrossWatch resource changes. It does not limit personal account security.
#### Display name and profile picture
Your display name appears on the Profile page and in navigation. It can contain up to 64 characters. Changing it does not affect your username, User Profile, Access Mode, or delegated resources.
You can upload a PNG, JPG, JPEG, or WebP profile picture up to 5 MB. Select **Replace picture** to upload an image, or **Remove picture** to remove it.
CrossWatch selects the displayed avatar in this order:
```
Uploaded CrossWatch profile picture
↓
Linked Plex profile picture
↓
Linked OIDC profile picture
↓
Default CrossWatch profile icon
```
Removing an uploaded picture can reveal a linked-account image.
#### Password
Select **Change password** and enter your current password and a new password. New passwords require at least eight characters.
CrossWatch keeps the current browser session. It clears all other sessions.
#### Two-factor authentication
CrossWatch uses six-digit TOTP codes. Select **Set up 2FA**, scan the QR code or enter the setup key, then verify a current code.
Enabling 2FA does not change the User Profile or Access Mode.
#### Recovery codes
CrossWatch generates recovery codes when you enable 2FA. Store them safely. Each code has one use.
Select **Recovery codes** to generate a replacement set. This requires your current password and invalidates the previous codes. Recovery codes are available only while 2FA remains enabled.
#### Disable 2FA
Disabling 2FA requires your current password. CrossWatch removes the TOTP requirement and recovery codes, then clears other sessions. The current session remains active.
#### Linked sign-in accounts
You can link or unlink your own Plex and OIDC identities.
* Select **Link Plex account** to complete Plex authorization. The linked identity becomes an additional sign-in method.
* Select **Link OIDC account** when an administrator has configured OIDC. The linked identity becomes an additional sign-in method.
Linking either account does not replace your username and password. It does not change the User Profile or Access Mode.
Managed users cannot configure global OIDC settings, including the issuer URL, client ID, client secret, or scopes.
#### Active sessions
The session list shows the current session, other active sessions, client information, IP address, and session age.
Revoke individual sessions or select **Revoke other sessions**. You cannot revoke the current session here. Select **Logout** to end it.
### Preferences
The **Preferences** tab is available to administrators and Full Access managed users. It is hidden for Read Only managed users.
Current settings include:
* **Playing card** — shows or hides the floating now-playing card.
* **Quick add** — shows or hides the shortcut for manual watched-item logging.
These preferences belong to your User Account. They do not change synchronization settings or your User Profile.
### Managed user access
All managed users receive the personal Profile page.
#### Read Only
Read Only managed users can view their delegated overview and manage their own display name, picture, password, 2FA, recovery codes, linked accounts, and sessions.
They cannot change normal delegated CrossWatch resources. The **Preferences** tab is unavailable.
#### Full Access
Full Access managed users receive the same Profile page and security controls. They can also use supported writable CrossWatch features within their assigned User Profile.
Full Access does not grant administrator access.
### What you cannot change here
The Profile page does not let managed users change:
* Their assigned User Profile or Access Mode
* Provider instance, Sync Pair, Watcher, or Webhook assignments
* Other users, global OIDC configuration, or global CrossWatch settings
Administrators manage user assignments and Access Modes through [Managed users](/crosswatch/settings/connections/managed-users.md).
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://wiki.crosswatch.app/crosswatch/profile.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.