Your profile

Every user can manage their own profile, whatever their role. Open My Profile from your name in the sidebar to update your personal details, notification preferences, and — where your workspace allows it — two-factor authentication.

Your role and branch access are set by an administrator, not here.

Update your details

1. Open My Profile.
2. Under Personal Details, edit your Full Name and Phone.
3. If you’re a bookable stylist, use Upload Photo under Profile Picture to set the photo customers see, or Remove to clear it.
4. Select Save Changes.

Your email, role, and branch access can’t be changed here — an administrator manages those.

Change your password

You change your password through the password-reset link, not from your profile:

1. Sign out, or open the login page.
2. Select Forgot Password?.
3. Enter your account email. We email you a link to set a new password.
4. Open the link and choose your new password.

Setting a new password signs you out of your other sessions, so you’ll log in again with the new one.

Choose your notifications

Under Notifications on your profile, choose how and when JustBook alerts you about bookings, payments, and package purchases, then select Save preferences. Pick at least one delivery channel. Text message and WhatsApp alerts need a phone number on your profile — without one, those channels are skipped (email and the in-app dashboard still reach you).

This section only appears while team alerts are enabled for your workspace (Settings → Notifications → Team Alerts) — when they are off, there is nothing to choose, so the card is hidden.

Two-factor authentication

Two-factor authentication (2FA) adds a one-time verification code, sent to you at each sign-in, on top of your password.

Whether you can turn 2FA on depends on your workspace policy, set by an administrator under Settings → Roles & Permissions:

• Off — 2FA is disabled for the workspace and the setting doesn’t appear on your profile.
• Optional — you can turn 2FA on or off for yourself.
• Required — 2FA is on for everyone and can’t be turned off.

Turn on two-factor authentication

1. Open My Profile.
2. Under Security, switch Two-step sign-in on.

From then on, after you enter your password at sign-in, JustBook asks you to enter a verification code before you’re logged in.

You choose how to receive it. If your workspace offers more than one method, sign-in shows you the options — email, text message, or WhatsApp — and sends the code once you pick. If only one method is available, the code is sent straight away. On the code screen you can Resend code, or Use a different method to have the same code sent another way. Resend code waits a minute after each code is sent — it shows the countdown, and becomes clickable again when the wait is over. If you request too many codes in a row, the wait gets longer.

The methods you’re offered are the ones your administrator has selected under Settings → Notifications → Staff sign-in, narrowed to the ones that can actually reach you — text message and WhatsApp need a phone number on your profile. If none can, JustBook falls back to email so you’re never locked out.

If your workspace requires 2FA, the Security section shows Required and you can’t turn it off.

Passkeys and authenticator apps

Codes sent to you aren’t the only second step. The same Security section on your profile (shown whenever your workspace’s 2FA policy isn’t off) lets you add stronger methods, on any plan:

• Passkey — sign in with Face ID, Touch ID, or a security key. Add one per device; rename or remove them anytime.
• Authenticator app — scan a QR code with an app like Google Authenticator or 1Password, then enter the 6-digit code it shows. You’ll get ten single-use recovery codes when you set it up — copy them or download them as a text file right away; they’re shown only once, and each can sign you in once if you lose your authenticator.

Setting up either method under an Optional policy turns two-step sign-in on for your account automatically, and keeps it on for as long as you have a method saved — the switch is held on, because a passkey you’re never asked for isn’t protecting anything. Remove your methods and you can turn it off again. At sign-in, JustBook asks for your strongest method first — a passkey prompt, or your authenticator code — with Try another way always available to fall back to a code by email, text, or WhatsApp.

Removing a passkey or turning off your authenticator app asks for your current password — a signed-in device alone isn’t enough to weaken your account. Codes over your workspace’s channels always remain available, so removing methods can never lock you out.