Your account

The account page holds everything that belongs to you as a person, not to a workspace. Open it from the bottom of the sidebar.

Without a workspace there is no sidebar, for example after you deleted your last workspace or before you created your first one. Then open Account at the bottom of the start screen instead.

Profile and language

Change your display name and the language of the app. Your sign-in email cannot be changed from here; write to hello [at] postfjord.com.

Password

Enter your current password and a new one. If you signed up with Google there is no password; you can add one by sending yourself a link.

A new password needs at least 10 characters. A short sentence works well, like three words you would never say together. We also say no to:

1. Passwords people try first, like 1234567890 or qwertyuiop.
2. Your email name or the word Postfjord.
3. Passwords that showed up in a data leak on another site. We check this with Have I Been Pwned: only the first 5 characters of a scrambled copy of the password are sent, so the check never sees your password.

A password you already have keeps working. The rule only counts when you choose a new one.

When you change your password, your other phones and computers are signed out and ask you to sign in again, within the hour.

Confirm it is you

A few changes ask for your password (or Google) again when you signed in more than 10 minutes ago:

1. Making an API key.
2. Approving a connection from Claude.
3. Connecting Stripe for sales tracking.
4. Inviting someone to a workspace or changing their role.
5. Deleting a workspace or your account.

Use your passkey, enter your password or press Continue with Google, and the change goes through right where you were. So someone at a computer you left signed in has a much harder time handing out access or deleting your work. Lock your computer when you walk away, since a Google account that is still signed in on it can confirm with one click.

Forgot it? Press Forgot password? on the sign-in page and open the link we email you. The newest link works for an hour. After five links in an hour, one address gets one more link every 10 minutes at most, however many people ask. Nobody can fill your inbox, and nobody can stop your own link for long. If your address was not confirmed yet, the link confirms it, and any Google sign-in or phone number that was added before is removed, so only the new password opens the account. A new password also signs out every device and removes your passkeys, and a Google sign-in under another address than your account's. It also stops every API key and AI app you connected, in every workspace (see Your API keys after a security step). Add your passkeys again under Account.

Passkeys

A passkey lets you sign in with Face ID, Touch ID, Windows Hello or your phone's screen lock instead of typing a password. It stays on your device, nobody can guess it, and it only works on app.postfjord.com, so a fake sign-in page cannot use it.

To add one:

1. Open Account and find Passkeys.
2. Give it a name, for example Work Mac. Postfjord suggests one from your device.
3. Press Add a passkey and confirm with your face, fingerprint or PIN.

To sign in with it, press Sign in with a passkey on the sign-in page. Some browsers also offer your passkey when you tap the email field.

If you signed in more than 10 minutes ago, Postfjord asks for your password, Google or a passkey you already have before it adds or removes one. We also email you every time a passkey is added. Did you get that email without adding one? Remove the passkey under Account and change your password.

Good to know:

• Your password and Google sign-in keep working. A passkey is one more way in.
• You can have up to 10 passkeys. The list shows when each was added and last used.
• Remove stops a passkey right away. If it was ever used to sign in, every phone and computer is signed out too, at the latest within the hour, so a lost device loses its access. Sign in again where you removed it and you carry on there. Delete the passkey from the device too, in its saved passwords or passkeys.
• Your email address must be confirmed before you can add a passkey. If the account's address changes, its passkeys stop working and you add new ones.
• Your passkeys are removed when you choose a new password with Forgot password?, when you press This was not me in an email about a new sign-in, and when you turn on two-step verification. Someone who only knew your password may have added one. Add yours again under Account.
• A passkey lives where you made it. Did you add it in Safari on a Mac? It reaches your iPhone through iCloud Keychain. Did you add it in Chrome on a computer? It is saved in your Google account, and an iPhone only offers it after you turn on Chrome under Settings, General, AutoFill & Passwords. No Face ID when you press Sign in with a passkey? That phone has no passkey yet. Sign in with your password and add one under Account.
• Passkeys work in the browser at app.postfjord.com. The Postfjord app for iPhone and Android does not have them yet.

Two-step verification

Two-step verification means signing in needs your password (or Google) and a 6-digit code from an app on your phone. Someone who learns your password still cannot get in.

1. Install an authenticator app on your phone, like Google Authenticator, Microsoft Authenticator or 1Password.
2. Open Account and press Turn on under Two-step verification.
3. Scan the QR code with the app, or type the key under it.
4. Type the code the app shows and press Turn on two-step verification.
5. Save the ten recovery codes you see, in a password manager or on paper. We show them only once.

Turning it on signs out every device, this one too, so the first sign-in with your code happens right away: the app asks for your password and the code once before it shows the recovery codes. From then on, signing in asks for the code after your password or Google. Turning it on also removes the passkeys you had, so add them again under Account. From then on a passkey counts as both steps, so Face ID and Touch ID sign you in without a code.

We email you when two-step verification is turned on or off, and when new recovery codes are made. Did you get the email about it being turned on without doing it? Press This was not me in the email within 24 hours. It turns two-step verification off, removes every passkey and any Google sign-in under another address than yours, stops your API keys and connected AI apps, gives your calendar feed and booking address new addresses and signs out every device, and we email you a link to choose a new password. Do that right away, since someone knows the old one. Does the sign-in page ask for a code you never set up, and the email is gone? Press I did not turn this on under the code, and we send the link again, for 24 hours after it was turned on. Later than that, write to hello [at] postfjord.com and we check that it is you before we turn it off. The window is short on purpose: anyone who can read your email could use the link.

With two-step verification on, sensitive changes (an API key, a passkey, new recovery codes, deleting) ask for the code or a passkey, not only the password.

Lost your phone? On the sign-in page, after your password, press Lost your phone? Use a recovery code and type one of your codes. It turns two-step verification off and signs out every device; sign in again and turn it on with your new phone. Each code works once. Make new ones under Account with New recovery codes.

Where you're signed in

Account lists every browser and app your account has used, with the browser and system (for example Chrome on Mac) and when it was last active. Postfjord keeps no IP address or place.

• Sign out next to a device signs that device out the next time it opens Postfjord.
• Sign out everywhere ends every session at once, this device's too, and stops your API keys and connected AI apps. For a device you do not recognize, use this and change your password.

When you sign in to Postfjord on a browser or app you have not used before, we email you. Was it not you? Press This was not me in the email within 7 days. It signs out every device, removes your passkeys and any Google sign-in under another address than yours, stops your API keys and connected AI apps and, if you use a password, sends you a link to choose a new one. Your calendar feed and booking address get new addresses too (see New private addresses after a takeover). The email goes to an address you have confirmed, a few times a day at most. The first few days after this arrived on your account, known devices do not trigger an email.

Your API keys after a security step

Someone who had your password could add a passkey and make an API key with it, and the key would keep working after you changed the password. So every API key and AI app connection you made, in every workspace, stops when you:

1. Choose a new password with Forgot password?.
2. Press Sign out everywhere.
3. Press This was not me in an email about a new sign-in or about two-step verification.
4. Get your email address put back after someone changed it.
5. Delete your account.

Keys that other owners made keep working. To use an app again, make a new key under Settings, Apps, or connect the AI app again. Every owner of the workspace gets an email whenever a key is made or an AI app connects, so a key nobody expected does not go unnoticed. See Your keys.

New private addresses after a takeover

Your calendar feed and the address for Other booking system are private links. Anyone who has one can read your calendar or send bookings, without signing in. So when you take your account back, with This was not me or when we put your email address back, Postfjord makes new ones in every workspace you are in, within 15 minutes:

1. The old addresses stop working.
2. We email you which ones changed.
3. Copy the new calendar feed address under Settings, Apps, Calendar feed and add it to your calendar app again.
4. Copy the new booking address from the Other booking system card under Settings, Apps and paste it into your booking system, Zapier or Make. Bookings sent to the old address are not counted.

Your other team members see the new calendar feed address too, and need to add it again.

Confirming your email

The email we send when you make an account has a link. It opens a page with a Confirm my email button. Press it while you are signed in to that account:

1. Not signed in? The page asks you to sign in first, then brings you back to the button.
2. Signed in to another account? The page asks you to sign out and switch.
3. Press Confirm my email. Nothing is confirmed before you press it.

So a mail scanner or a link preview cannot confirm your address, and nor can someone who only has the email.

The link works for 24 hours. If the address is still not confirmed a day after the last link, we send one reminder with a new link. The link in the earlier email then stops working. You get that reminder once, never again after it.

Cannot sign in to the account? Someone else may have made it with your address. Press Forgot password? on the sign-in page and open the link we email you. It confirms the address, sets a password of your own and removes any other way in.

Postfjord sends these emails itself. If you get another email that asks you to confirm your address or reset your password, for example from a firebaseapp.com address, someone else asked for it. Opening its link changes nothing on your account.

Got an email that says the address on your account was changed, and it was not you? Postfjord puts your confirmed address back by itself within 15 minutes. It also signs out every device, removes your passkeys, stops your API keys and connected AI apps, gives your calendar feed and booking address new addresses, and emails you. Was two-step verification turned on while the account had the other address? Then we turn it off too, since the email about it went to the other address. If you had it on yourself, we may not be able to tell the two apart, so set it up again under Account. To change the address, someone had to know your password, so choose a new one with Forgot password? and turn on two-step verification.

Terms and privacy policy

To create an account, tick I accept the Terms and the Privacy Policy on the sign-up page. Create account and Continue with Google stay grey until the box is ticked. The two links open the Terms and the Privacy Policy.

Postfjord saves which version you accepted and when, on your account. It saves nothing else with it: no IP address and no browser. Each version you accept is saved on its own, so accepting a new one keeps the date you accepted the old one.

To see what you accepted, open Account and look at the Terms card. It says which version you accepted and when. Press Read the Terms you accepted to open them. Every version of the Terms stays on postfjord.com at its own address, such as postfjord.com/terms/2026-10-02, after a newer one takes its place. The current Terms are always at postfjord.com/terms. The Privacy Policy is at postfjord.com/privacy, with the date of its last change at the top.

When we change the Terms or the Privacy Policy, Postfjord asks you again the next time you open the app. Read them, tick the box and press Continue. Until you do, the app shows only this question. If you do not want to accept:

1. Press Open Account under the question.
2. Under Plan, press Cancel subscription, or press Withdraw from contract here if you bought the plan less than 14 days ago. Manage billing opens your invoices and card, also when a payment for your plan is still open. Under X add-on, press Remove X add-on to stop it, or withdraw from it in its first 14 days. You cannot choose, switch or add anything there, and nothing else in the app opens.
3. Press Back to the terms to go back to the question, or Sign out.

To delete your account or get a copy of your data, write to hello [at] postfjord.com. You can delete an account yourself from there only when you own no workspace, since the workspaces must go first and they stay closed until you accept.

Accounts made before 2 October 2026 are asked once, in the same way.

Light or dark

Postfjord starts light. Under Appearance you can change it: Dark stays dark, and Auto follows your phone or browser, so it turns dark when they do.

The switch sits in three places, all the same setting: at the foot of the sidebar, at the top of the screen on a phone (one tap flips it), and here on the account page. It is saved in the browser you are using, so choose it again on a second computer.

Postfjord on a phone

The bar at the bottom holds four favourites and Menu. Menu opens everything the sidebar has on a computer: every part, Channels, Settings, Account, Help, the workspace switch and Sign out.

To choose your favourites, open Menu and press Choose favourites. Tap up to four in the order you want them, then Save. The choice follows you to every phone you sign in on, and it is the same in every workspace. Until you choose, the bar shows Home, Calendar, your manager (Bo, or the name you gave it) and Posts.

A dot on Menu means something inside needs a look: an unread message when Inbox is not one of your favourites, or a channel that needs a Reconnect when Channels is not.

The bottom of every screen shows which version you have, with an Update button when a newer one is ready.

Emails from Postfjord

Sign-in and security emails are always sent. Product updates, the weekly summary and publishing problem alerts are optional and can be switched off here. Product updates covers the tips we send after you sign up and our news about Postfjord. Every one of those emails has an unsubscribe link, and pressing it turns this box off too. Tick the box again and they start again. Weekly summary is one email on Monday morning, soon after 07:00 in the workspace's time zone, for each workspace you are a member of: posts that went out last week per channel, the three with the most likes and comments on channels that share those numbers, up to three posts that did better than usual, how many posts wait under Posts, Failed, and how many are scheduled this week. A workspace that published nothing last week sends no summary. Publishing problems includes the email about a scheduled post that did not go out, the email about a channel that needs a Reconnect or whose messages do not reach Postfjord, and the reminder a week before a LinkedIn connection runs out.

Plan and AI budget

Your plan sets how many workspaces you can own, how much media storage each has and the monthly AI budget. The budget belongs to your account and is shared by every workspace you own; the page shows how much of it this month's drafts have used.

While an AI call runs, Postfjord sets a few cents aside for it and counts the real price when it is done. Near the end of the budget, many calls at once can use up what is left before they finish. Then a new call says to try again in a minute.

Without a workspace the plan only shows up when you have a subscription, so you can still open Manage billing or cancel it. You pick a new plan from inside a workspace.

For 14 days after you buy a plan, the plan card also shows Withdraw from contract here, the right of withdrawal for consumers. See Plans and billing.

FAQ