# NEXUS AI Accounts

The authenticated platform API supports user profile, password, email verification, and two-factor authentication workflows.

## Account operations

Users can read and update their profile, change their password, request password reset, verify an email address, and request a verification email.

## Two-factor authentication

The API supports checking 2FA status, setting up and verifying TOTP, setting up email-based 2FA, disabling 2FA, regenerating backup codes, and testing a TOTP code.

## Safety

Account recovery, password, 2FA, and backup-code operations are security-sensitive. Agents should not request or store passwords, TOTP secrets, or backup codes in prompts, logs, source code, or tickets.

## Related resources

- [Authentication](/docs/auth.md)
- [Security](/docs/security.md)
- [Organizations](/docs/organization.md)