> ## Documentation Index > Fetch the complete documentation index at: https://docs.tenderly.co/llms.txt > Use this file to discover all available pages before exploring further. # Manage Security Email Notifications > Turn on Tenderly security emails for password and email changes on your account and for access tokens created or revoked in organizations you manage. Security email notifications tell you when your account's password or email address changes, and when someone creates or revokes an [access token](/platform/account/projects/api-tokens) in an organization you manage. You choose which ones you get in the **Email notifications** section of the account **Settings** page, below **Profile**. Every setting is off by default. Tenderly sends these emails only after you turn them on, except for the [emails that are always sent](#emails-that-are-always-sent). Email notifications section with Security alerts and Tokens created or revoked rows ## Open the email notification settings 1. Click the workspace picker at the top of the sidebar. 2. Expand **Personal** with the arrow next to it and select **Account settings**. In your personal account, the same page is **Settings** in the sidebar. 3. Scroll to **Email notifications**. To go straight to the section, open [dashboard.tenderly.co/account/settings#email-notifications](https://dashboard.tenderly.co/account/settings#email-notifications). ## Turn an email notification on or off Click a row or its checkbox. Tenderly saves the change immediately and shows a confirmation message. ## Your account: Security alerts The **Security alerts** row under **Your account** covers emails about your user account. It is one setting that applies in every organization you work in. | Email | Sent when | Sent to | | - | - | - | | Password changed | Your password is changed on the **Security** page or reset through a password reset link | You | | Email changed | Your account's email address changes | Your new address, plus your previous address, which is [always notified](#emails-that-are-always-sent) | ## Organization: Tokens created or revoked The **Tokens created or revoked** row sends an email when someone creates or revokes an organization access token. This covers [global and project tokens](/platform/account/projects/api-tokens#token-scopes), whether created on the organization's **Access Tokens** page or in a project's [settings](/platform/account/projects/api-tokens#create-a-project-token-from-project-settings). The email names the token and the organization. Tokens in your [personal account](/platform/account/projects/api-tokens#personal-account-access-tokens) don't trigger these emails. Each organization has its own setting, so turning it on for one doesn't change the others. ### Who gets organization emails Organization emails go only to people who turned them on for that organization and are either its owner or a member with the **Manage access tokens** [permission](/platform/account/organizations/members#member-permissions). Members who haven't accepted their invitation yet don't receive them. Each recipient gets one email per event. The section lists only the organizations you own or hold the **Manage access tokens** permission in. If you manage none, the section shows only **Your account**. With one organization, the group is labeled **Organization**. With two, each organization has a tab. With three or more, pick the organization from a dropdown. The line under the selector names the organization you are editing. ### Expiring tokens An organization can also show an **Expiring tokens** row. The row is checked and disabled because Tenderly always sends reminders before a token expires, so you can replace it before it stops working. You set a token's expiration date when you create it; see [Set a token expiration date](/platform/account/projects/api-tokens#set-a-token-expiration-date). ## Emails that are always sent These emails don't depend on your email notification settings: * **Email changed, to the previous address.** When your account's email address changes, Tenderly notifies the previous address even if **Security alerts** is off. If someone else changes the address, you still hear about it at the address you had before. * **Token expiration reminders** for organizations you manage. * **Password reset emails**, which carry the reset link as part of the reset flow. For an organization-wide record of password changes and access token changes, see [Activity Logs](/platform/account/organizations/activity-logs). This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.