Detected country: US
logo
API Docs

Getting Started

  • How to get started with Cobalt

Assets

  • Assets are what we pentest
  • Asset Types
  • Create an Asset
  • Risk Advisories

Pentests

  • Pentests
  • Create a Pentest
    • Overview
    • Asset Details
    • Pentest Details
    • Scope & Test Period
    • Preparation
  • Create an Autonomous Pentest
    • Launch a Saved Autonomous Pentest
    • Review a Closed Autonomous Pentest Report
  • Pentest Process
  • Pentest States
  • Coverage Checklist
  • Pentest Expectations
  • In House Pentests
    • Complete an In-House Pentest (For Pentesters)
    • Set Up an In-House Pentest
  • Findings
    • Remediate Findings
    • Finding States
    • Severity Levels
  • Reports
    • Contents of a Pentest Report
    • Customize Your Report
    • Co-branded Reports
  • Preparation

Engagements

  • Engagements Overview
  • Digital Risk Assessment
  • Secure Code Review

Findings

  • Findings

Insights

  • Insights

Planning

  • Planning

Methodologies

  • Cobalt Methodologies Overview
  • Web Methodologies
  • Autonomous Web Methodologies
  • API Methodologies
  • External Network Methodologies
  • Internal Network Methodologies
  • Mobile Methodologies
  • Cloud Configuration Review Methodologies
  • Cloud Pentest Methodology
  • Desktop Methodologies
  • AI/LLM Methodologies
  • Digital Risk Assessment Methodology
  • Secure Code Review Methodologies

Attack Surface

  • Attack Surface Monitoring (ASM)

DAST Scanner

  • DAST Scanner Overview
  • Best Practices
  • FAQ
  • Integrations
  • Partial Scans: Reduced Scope
  • Scans
  • Sequence recorder
  • Targets
  • Target Authentication
  • Extra Hosts
  • Blackout Period

User Account

  • Account Overview
  • Account Settings
  • Password Best Practices
  • Sign In to Cobalt
  • Troubleshoot Sign-in Issues

Collaboration

  • Collaboration Overview
  • Collaborate on Pentests
  • Groups
  • Manage Pentest Collaborators
  • User Roles and Permissions
  • Manage Notifications

Organization

  • Organization Overview
  • Manage Users
  • Your Cobalt Contract
  • Configure Organization Settings
    • Configure SAML SSO
    • SAML Migration: Update Your Configuration
    • SCIM Provisioning Setup Guide

Credits

  • Cobalt PtaaS Tiers
  • Cobalt Credits
  • Track Your Credits

Integrations

  • Cobalt Integrations Overview
  • Integration Builder
    • Connect your applications
    • How to Guides
      • Create Azure DevOps Work Item for Findings
      • Create GitHub tickets for Findings
      • Create GitLab tickets for Findings
      • Send email notifications for Findings from Outlook
      • Send MS Teams notifications for Findings
      • Create Jira tickets for Findings
      • HTTP Connector
      • Import Assets from Google Sheets
      • Map Cobalt Pentest Finding Severity to Jira Issue Priority
      • Modify Jira Issue Summary to contain Pentest Title
    • Troubleshooting
  • Integrate Jira with Cobalt
    • Jira Cloud Integration
    • Jira Data Center Integration
    • Push Cobalt Findings to Jira
    • Synchronize Cobalt Severity Levels with Jira
    • Switching to a New Jira Instance
    • Troubleshoot Your Jira Integration
  • Slack
  • Microsoft Teams
  • Webhooks
  • DefectDojo
  • Kenna Security
  • Vanta
  • Carried Over Findings
  • Create Test Finding
  • Wiz

Cobalt API

  • Cobalt API Overview
  • Create a Personal Cobalt API Token
  • Get an Organization Token
  • Revoke Your Personal Cobalt API Tokens
  • Create or Modify an Asset
  • Import Findings to Google Sheets

Glossary

  • Glossary

What's New

  • May 2026
  • April 2026
  • March 2026
  • February 2026
  • January 2026
  • November 2025 
  • August 2025
  • July 2025
  • June 2025
  • May 2025
  • April 2025
  • March 2025
  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • September 2024
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • January 2024
  • Product Updates
  • August 2026
‌
‌
‌
logo

Powered by

Assistant

Ask new question

Powered by
  • Home
  • User Account
  • Account Settings

Account Settings

2min read

Share

Explore your Cobalt account.

:::info To navigate to your account settings, select the profile icon in the Cobalt app.

:::

Edit Your Profile

Other users can view your profile information. To edit your profile, navigate to https://app.cobalt.io/settings/profile.

On the Profile settings page, you can:

  • Upload a user profile image.
  • Specify your full name and country.
  • Add links to your profiles in social networks.
  • Add your background information.

When finished, select Update Profile to confirm.

Update Account Settings

To edit general account settings, select Account Settings on the user menu.

Change Your Username

You can create a custom username for your account.

  1. Navigate to https://app.cobalt.io/settings/account.
  2. In the Username field, enter a new username.
  3. Select Save Changes to confirm.

Change Your Password

You can change your password by resetting it.

  1. Navigate to https://app.cobalt.io/settings/account.
  2. Select Change Password.
  3. Follow the instructions in the email that you receive to reset your password. Learn how to create a strong password.

If you’re using Google authentication (OAuth 2.0), sign in with your email and password, and then change your password.

If you forgot your password, you can reset it from the Sign In page.

Manage Security Settings

To manage two-factor authentication (2FA) settings for your account, select Security Settings on the user menu.

Two-Factor Authentication

Enable Two-Factor Authentication

If you’re signing in with your email and password, you will only be able to access your account after enabling two-factor authentication. In case it’s not configured, you will be required to do so right after signing in. 2FA adds another layer of security to your account by asking for more than just a password.

Follow the instructions on the screen to complete the process. Use an authenticator of your choice, such as Authy or Google Authenticator.

After selecting Continue, you will see your recovery code. Save the code. After you close the overlay, you won’t see the code again.

If you’re signing in through single sign-on, 2FA doesn’t apply. This includes SAML SSO and OAuth.

Manage 2FA Devices

When you add a new 2FA device, it appears on the account security page. Here, you can see the authenticator app that generates one-time codes required for authentication to your Cobalt account.

Reset Two-Factor Authentication

We don’t recommend turning off 2FA on your account. However, you may need to reset your 2FA methods when your authenticator device was lost or stolen.

You can remove your current 2FA device and add a new one for added security, assuming you’re still signed in or marked your machine to be remembered for 30 days (during sign-in).

To remove a 2FA device:

  1. Navigate to https://app.cobalt.io/settings/security/2fa.
  2. Under Two-Factor Authentication (2FA), select Manage.
  3. Locate the desired device, and select the trash icon.

Now you can add a new 2FA device to protect your account.

If you lost access to your authenticator and don’t have access to the security setting anymore, ask your Organization Owner to turn off 2FA or use your recovery code. For details, see Lost Access to Your Authenticator.

Create and Manage API Tokens

To work with the Cobalt API, you need an API token. To manage your API tokens, navigate to https://app.cobalt.io/settings/api-tokens.

Learn how to:

  • Create an API token

  • Revoke API tokens

Share