Security
Settings → Account Settings → Security covers access to your own Sync GTM account.
What it covers
- Change your password
- Manage access to your account
How to open it
- Open Settings from your avatar in the top-right
- Under Account Settings, click Security
The credentials that actually leak
Your password is rarely the weak point. These are:
- API keys — your own provider keys, stored per integration. Rotate at the provider when someone leaves.
- Table webhook URLs — anyone holding one can create rows in your table, and with Auto-run on, those rows spend credits.
- Shared templates — check no key or internal prompt rode along before you publish one.
Never paste an API key or webhook URL into a shared doc, a Slack channel, or a template you plan to publish.
Data handling
How Sync GTM stores and retains your data is covered in Data Privacy and Retention.
Common use cases
- Change your password after a shared or reused one
- Lock down access when a teammate or contractor leaves
- Audit what a table exposes before publishing it as a template
- Respond when a webhook URL or provider key has leaked
Best practices
- Use a unique password from a password manager; reuse is how most accounts are lost
- Rotate provider API keys at the provider when someone with access leaves
- Never paste an API key or webhook URL into a shared doc or a Slack channel
- Re-issue a webhook URL if it has been shared; with Auto-run on, anyone holding it can spend credits
- Review a template for keys and internal prompts before you publish it
Where to next
- Profile Information — your name, email, avatar
- API Key — connecting your own provider keys
- Data Privacy and Retention — what we store and for how long