Account settings and security

Open Settings from the sidebar, or click your name at the top right and choose Settings. Everything on this page applies to your whole account.

Profile

Update your Name, Company, Email, Country and Time zone, then click Save profile.

• Time zone controls how dates and times appear across the app, and the time you pick when you schedule a campaign.
• Changing your email sends a confirmation link to the new address. Until you confirm it, verification and sending are locked. See create your account.
• Company appears on invoices issued after you save it.

Business postal address (required for sending)

Anti-spam laws such as the US CAN-SPAM Act require a valid physical postal address in commercial email. InboxRoads adds yours to the footer of every campaign. You can't launch a campaign until it's saved.

1. Go to Settings → Business postal address.
2. Fill in Address line 1, City and Country (required), plus Address line 2, State / region and Postal code if they apply.
3. Click Save address.

The address is also used as your billing address on new invoices. A registered PO box or private mailbox is usually acceptable under CAN-SPAM. Check the rules in your own country. The FTC's CAN-SPAM compliance guide has details for the US.

Tags and custom fields

Settings is also where you create Tags and Custom contact fields. Each custom field shows the merge tag to use in emails. See lists, tags and segments and merge tags.

Password

1. In the Password card, enter your Current password.
2. Enter a New password and confirm it in Confirm new password. Use at least 10 characters with letters and numbers.
3. Click Update password.

Forgot your password? On the login page, click Forgot password? to get a reset link by email.

API keys

Create and revoke keys in the API keys card. See create an API key.

Security tips

• Use a unique password that you don't use on any other site, and store it in a password manager.
• Give each integration its own API key so you can revoke one without breaking the others.
• Revoke keys you no longer use. The last used date helps you spot old ones.
• Never paste API keys into public code, shared documents or front-end JavaScript.
• Log out on shared computers. Click your name, then Log out.

Key takeaways

• Keep your profile, time zone and email current in Settings.
• A business postal address is required before you can send campaigns.
• Use a strong, unique password and revoke unused API keys.