# Account and Security

Manage your profile, security settings, API keys, and referral rewards.

Account settings manage personal identity information and security controls. Account-level settings are separate from space resource management, and some entries may be hidden depending on the account management mode or current space type.

| Feature           | Description                                     | Visibility                  |
| ----------------- | ----------------------------------------------- | --------------------------- |
| Profile           | Manage basic account information.               | Signed-in accounts.         |
| Security settings | Manage account security settings.               | Signed-in accounts.         |
| API keys          | Create and manage keys for programmatic access. | Unmanaged accounts.         |
| Referral rewards  | View referral records and reward details.       | Personal, unmanaged spaces. |

## API keys

API keys are sensitive credentials. Store them immediately in a controlled secrets manager after creation. Do not put them in code repositories, frontend configuration, or public logs. Deleting a key disables programmatic access that depends on it.