Your profile, passkeys, and AI connections

Why your email is read-only

The Profile panel shows two email values in grey boxes with no inputs and no save control. They are display-only by design: the save action writes your name and nothing else.

Sign-In Email

The address you actually authenticate with. It is what a magic link is sent to and what a passkey is tied to.

Contact Email

The address recorded on your membership in this workspace. When that value is empty the page falls back to your sign-in address, so the two boxes can read identically even when only one is really set.

If either value is missing entirely, the box reads Not loaded. On a tablet or desktop the same contact address is repeated in the summary strip at the top of the page, alongside your workspace name and a count of enabled notifications.

Changing where workspace email lands is a different setting and you may be able to do it yourself. Which alerts reach you is controlled in Notifications, at the bottom of the same page, and the addresses documents are sent to are covered in workspace email addresses.

Registering and managing passkeys

The Security area manages passkeys for this Conterminal account. A passkey replaces the emailed sign-in link with Face ID, Touch ID, Windows Hello, a device PIN, or a hardware security key. The panel states the scope as “Manage passkeys for this Conterminal account” — account-wide, not per-workspace.

When you open the area it first shows Checking passkey support... while it looks for WebAuthn in your browser. If WebAuthn is not exposed you get an amber Passkeys unavailable notice reading “This browser or device does not expose WebAuthn passkey support.” and no controls at all. Otherwise your registered passkeys load, with Loading passkeys... while the list is fetched and No passkeys registered. when you have none.

1. Add a passkey. Select Add passkey and complete your operating system's prompt. On success the panel shows an Updated notice reading “Registered name.” — or “Registered a new passkey.” when your device did not supply a name — and the list refreshes.
2. Rename one. Select Rename on a row, type a name, and select Save. Names cap at 120 characters; the field simply stops accepting more. An empty name is rejected with “Enter a passkey name.” Cancel discards the edit. Naming them after the device — Yard iPhone, Dispatch desktop — is what makes the next step safe.
3. Remove one. Select Remove. The row swaps to Confirm Remove and Cancel; nothing is deleted until you select Confirm Remove. Afterwards the notice reads “Passkey removed.”

Each row lists Created and Last Used. A passkey you registered but never signed in with shows Never under Last Used, which is the fastest way to spot one that was registered on a device you no longer have. While any add, rename, or remove is running, the Rename and Remove buttons on every row are disabled.

Errors appear in a red Passkey error box above the list. The ones worth recognizing: “The passkey prompt was cancelled.” (you or the operating system dismissed the prompt — harmless), “This passkey is already registered for your account.”, “This account has reached the passkey limit.”, “The passkey request expired. Try again.”, and “That passkey could not be verified. Try again, or use email sign-in if the problem continues.” That last sentence is the correct escape hatch: passkeys never replace email sign-in, they sit alongside it.

Reviewing and revoking AI shipment connections

The AI shipment connections area lists “Read-only ChatGPT connections authorized to search one Conterminal workspace.” If nobody has connected one, it reads No ChatGPT shipment connection is active. Each connection shows the client's name, the line Read-only · connected with the date you authorized it, and a Revoke button.

The connection is created outside this page, on a consent screen headed Connect plus the client name and labeled Read-only connection. That screen asks you to “Choose the single Conterminal workspace this client may search” from a dropdown listing your eligible workspaces as name · Carrier or name · Freight forwarder, then offers Allow read-only access and Cancel. If you have no eligible workspace it says “No active carrier or freight-forwarder workspace is available for this account.”

What a connection can do

Search shipments, read an operational snapshot for one shipment, and list shipments confirmed ready for pickup — all inside the one workspace you picked. Every request rechecks your membership and is recorded; if the audit write fails, the answer is withheld rather than returned.

What it cannot do

Create, update, refresh, upload documents, or send messages. There is no write path at all. It is also capped: exceed the request limit and the assistant is told “Request limit reached. Try again in N seconds.”

Select Revoke to end a connection. Conterminal clears the workspace binding first and then revokes the authorization, and the panel reports “The AI shipment connection was revoked.” Because the binding is cleared before anything else, a revoke that fails partway still leaves the assistant unable to reach any workspace — it gets a workspace-access error on its next request.

The area is only rendered when your deployment has AI connections turned on, or when you already have at least one connection to show. Only clients on Conterminal's approved list are listed at all. If the area is absent from both the page and the phone selector, the feature is off for your deployment — that is a configuration decision, not something you can toggle.

Reading the status banner

Every save on this page works the same way: the form posts, the server writes, and you are redirected back to Settings with the outcome in the URL query string and an anchor pointing at the panel you saved. That single mechanism explains all three of the banner behaviors that surprise people.

Only one banner is ever shown

The page renders at most one status box. Errors always win over successes, and within each group there is a fixed order. A second outcome in the same URL is simply not drawn.

The banner lives in the URL

Refresh the page, press Back to it, or open a copied link, and the same banner is drawn again from the query string. It is a record of the last save, not a live confirmation.

Not everything uses it

Passkey results and AI-connection revokes report inside their own panels. A quiet banner after either action is expected.

For the profile panel the two messages you will see are Profile saved / “Your workspace profile was updated.” and Could not save profile, which prints the underlying reason on its second line. For notifications they are Notifications saved / “Your email notification preferences were updated.” and Could not save notifications / “Please try again.”

Settings on a phone

On a narrow screen the page does not stack every panel. A selector labeled Settings area sits at the top and shows one area at a time; the rest are hidden until you choose them. On a tablet or desktop the selector disappears and every area is stacked in the same order. The summary strip with your workspace, contact email, and notification count is desktop-only.

The list of areas depends on your workspace, so two colleagues can legitimately see different menus. Profile, Security, Email aliases, LFD email scanning, Reporting defaults, and Notifications are always listed. AI connections appears only when that feature is on for your deployment or you already have a connection. Delivery-order review appears only in a freight-forwarder workspace, and Received confirmation only in a carrier workspace.

One deliberate phone adaptation is worth knowing about: the email aliases area drops its wide table and renders each alias as a labeled card with Purpose, Status, Routing, and Last sync, so nothing scrolls sideways. More phone guidance lives in using Conterminal on a phone.

Troubleshooting