Account, Security & Billing
Your account
Everything about you as a person — as opposed to your organization's rate library or estimates — lives on one page: open the account menu and go to My account. It's a row of tabs: Profile, Password, Sessions, Two-factor, Email, and Appearance. If you're an organization admin you'll also see an Organization tab for renaming your org — see Team and governance for the rest of org administration.
Profile and appearance
The Profile tab is where you set your name. Your email has its own confirm-flow tab (see below), and your role is assigned by an admin, so both show up read-only here.
The Appearance tab picks a color theme — Default, Terracotta, Mint, Amber, or Mono — and previews it instantly before it saves. It's stored on your account, so it follows you to any device you sign in on; a separate light/dark toggle layers on top of whichever theme you pick.
Password and email
On Password, changing your password asks for your current one first. The moment it saves, every other session you're signed into is signed out — only the device you changed it from stays signed in, so a password change doubles as a way to cut off a session you don't recognize.
On Email, changing your email also asks for your current password, then sends a confirmation link to the new address. Nothing changes until you click that link from the new inbox — your sign-in email stays the old one until then.
Two-factor authentication
The Two-factor tab adds a 6-digit code from an authenticator app (Google Authenticator, 1Password, and similar) on top of your password. Enable two-factor authentication shows a QR code and a manual-entry secret; scan it, then confirm with the code it generates. Once confirmed, CrewMix shows you ten single-use recovery codes — save them somewhere safe, because they're shown only that one time and stand in for a 6-digit code if you ever lose the authenticator device.
Once enabled, the tab shows how many recovery codes you have left and lets you regenerate recovery codes or disable two-factor authentication — both ask for your current password first. From then on, signing in asks for your password and then a code (or a recovery code) before you're in.
Sign-in and sessions
If your organization has Google or Microsoft sign-in configured, the Connected accounts card on Profile lets you link one to your login. Signing in with a Google account whose email matches yours and is verified links automatically — and emails you a security notice so a quiet takeover can't go unnoticed. Microsoft never links automatically; the only way to connect one is the explicit Connect button here.
The Sessions tab lists every device currently signed in — a summary, its IP, when it first signed in, and when it was last seen, with your current session badged. Sign out ends any other session immediately, and if you have more than one, Sign out everywhere else ends them all in one click while keeping the device you're on.
Billing and your plan
Billing lives on its own page (Admin → Billing, for those with access) and covers your organization's subscription, not your personal account. CrewMix has two plans:
- Solo — $99/month, 1 user, 15 AI imports a month.
- Team — $299/month, 10 users, 50 AI imports a month, and it also unlocks org-wide governance (roles, an audit log, and sign-in activity) — see Team and governance.
New organizations get a 14-day free trial that includes 3 AI imports to try before you pick a plan; a card is required up front, but you won't be charged until the trial ends, and you can cancel anytime. Change plan switches your price in place, prorated on your next invoice — moving to a smaller plan needs your active users within its new limit first, and nobody is ever deactivated for you. Manage billing opens Stripe's secure hosted portal for your card, invoices, and cancellation.
Bring your own AI key
Open Settings → AI extraction and turn on Your own AI key to run imports on your own Anthropic or Google account instead of CrewMix's. Pick a provider and a model, then paste your API key — it's stored encrypted and shown only once, and you can Replace or Remove it later, but never read it back. Switching providers drops the outgoing one's stored key, so you'll confirm before that happens.
Runs on your own key are unlimited here and billed by the provider directly to your organization, instead of drawing down your plan's allotment — see Keep an eye on AI usage for where that meter lives and how it's tracked.
Good to know
- Nothing here touches your rate library or estimates — this is your personal sign-in and your organization's subscription, kept separate from the work itself.
- Two-factor authentication, sessions, and connected accounts are all optional — only your profile and your organization's billing are required to use CrewMix.
- If two-factor authentication isn't available in your environment, the tab says so instead of offering to enable it.