Your profile

Your profile holds the name and email address attached to your account. Both live in the Profile section of the Account page.

Open your profile

Tap mirepoix in the navigation bar and choose Account.
The Profile section is at the top of the page.

If you’re signed in but not a member of any kitchen, the landing page links to a standalone Edit your name form. That form covers name only — to change email from there, accept a kitchen invitation first.

Change your name

Edit the Your name field.
Click away from the field.

The name saves the moment you leave the field, and a brief Saved ✓ confirms it — there’s no Save button. The field can’t be left blank, so an empty name won’t save.

The new name shows up beside your row in the Members list and as the inviter line in any invitation emails you send.

Change your email

Email lives behind a verification step so a stolen session can’t redirect your sign-in codes.

Tap Change email next to your current address.
Type the new address in the New email field.
Tap Send verification.

Mirepoix sends an 8-character code to the new address. The code is good for 10 minutes and can be used once.

To finish the change:

Open the inbox at the new address and copy the code.
On any device, open /session/new and enter your sign-in email.
On the code-entry page, paste the verification code and tap Sign in.

The change applies the moment you confirm. Mirepoix then sends a notification to the old address so you’d notice if someone changed your email without your knowledge.

If the new address is already in use

The verification page returns: That email address is already in use. Request a new code with a different address. Pick a different address and start over.

If you hit a rate limit

Mirepoix caps email-change requests at 3 per hour per account. After the third, Send verification returns a Could not send verification error. Wait an hour and try again.

Why the two-step flow

If someone got hold of your sign-in session, they could otherwise change your email and lock you out. The verification step blocks that. Even with your session, an attacker would also need to read the code at the new address and ignore the notification sent to the old one.