Skip to Content

Security

Settings → Account Settings → Security covers access to your own Sync GTM account.


What it covers

  • Change your password
  • Manage access to your account

How to open it

  1. Open Settings from your avatar in the top-right
  2. Under Account Settings, click Security

The credentials that actually leak

Your password is rarely the weak point. These are:

  • API keys — your own provider keys, stored per integration. Rotate at the provider when someone leaves.
  • Table webhook URLs — anyone holding one can create rows in your table, and with Auto-run on, those rows spend credits.
  • Shared templates — check no key or internal prompt rode along before you publish one.

Never paste an API key or webhook URL into a shared doc, a Slack channel, or a template you plan to publish.


Data handling

How Sync GTM stores and retains your data is covered in Data Privacy and Retention.


Common use cases

  • Change your password after a shared or reused one
  • Lock down access when a teammate or contractor leaves
  • Audit what a table exposes before publishing it as a template
  • Respond when a webhook URL or provider key has leaked

Best practices

  • Use a unique password from a password manager; reuse is how most accounts are lost
  • Rotate provider API keys at the provider when someone with access leaves
  • Never paste an API key or webhook URL into a shared doc or a Slack channel
  • Re-issue a webhook URL if it has been shared; with Auto-run on, anyone holding it can spend credits
  • Review a template for keys and internal prompts before you publish it

Where to next