On Sign up, choose what you are joining as:
- and _).An account has one role for good: a company and a researcher need separate accounts. People who handle a company's reports join its team instead of creating a company account.
Then:
Enter your email or username and your password, then a second factor: the code from your authenticator app, a code we email you (Send me a code), or one of your recovery codes (Lost your phone? Use a recovery code). See Account security for the limits on wrong attempts.
Every device signed in to your account is signed out when the password changes. If you lost your phone and your recovery codes, write to support from the address of your account.
Everything is under Settings:
| What | Where | Notes |
|---|---|---|
| Password | Settings → Security | Asks for the current one. Signs out every device. |
| Settings → Security | Asks for your password; we send a code to the new address to make sure it works. | |
| Recovery codes | Settings → Security | Generate new codes — the old ones stop working at once. |
| Username | Settings → Profile | Once every 7 days. Your old profile link stops working. |
| Picture, description, website, location | Settings → Profile | Pictures: PNG, JPEG, WebP or GIF up to 3 MB, cropped to a square, metadata removed. |
| Profile visibility | Settings → Profile | Researchers: public or private (shown as “a researcher”). |
| Email copies of notifications | Settings → Notifications | See Messages and notifications. |
| Payout details | Settings → Payouts | Researchers. See Bounty payments. |
| API keys | Settings → API keys | See API overview and AI assistants. |
| Team | Settings → Team | Companies. See Company teams. |
| Integrations | Settings → Integrations | Companies. See Getting started as a company. |
| Agreements | Settings → Agreements | See Agreements. |
RootBounty is available in English, Spanish, Catalan, French, German, Italian, Portuguese, Russian, Chinese and Arabic. Choose yours with the language menu in the header; it is remembered on that browser. Legal texts are published in English and Spanish.
Settings → Security → Download my data gives you, as a JSON file, everything RootBounty stores about you: profile, reports, programs, posts, payments, sessions, notifications and more.
Settings → Security → Delete my account… asks you to type your username, your password and a second-factor code. It can’t be undone:
Your payout details are deleted too, so wait until your pending bounties are paid.