Account and Security

Create an account

On the sign-in page, choose Create account. Enter your email address, a password of at least eight characters, and the same password again, complete the verification challenge when it appears, then select Create account. If Google sign-in is available, you can choose Continue with Google instead.

Open the verification message sent to your email address and follow its link. If the message expires or never arrives, return to the sign-in page, enter your address, and use Resend verification email. Check spam and confirm that the address was typed correctly before requesting another message.

Sign in and recover access

On /login, enter your email address or username and password, then select Sign in. Use the eye button in the Password field to show or hide what you typed. Google-connected accounts can use Continue with Google below the form when it is available. Complete the security check when it appears.

Choose Forgot password beside the Password label if you cannot remember your password. On /forgot-password, enter the account email address and select Send recovery email. If the address belongs to an account, the message contains a temporary password. Sign in with it, then change your password in Settings → Security. The page confirms the request without revealing whether an account exists.

When multi-factor authentication is enabled, /login/mfa opens after sign-in. Enter the current six-digit authenticator code or a recovery code in the same field, choose whether to trust this device for 30 days, then select Continue. A recovery code works once; remove it from your saved list after use. Back to sign in ends the pending sign-in.

Open account settings

In the dashboard header, open the account menu at the far right and select Settings. In the Web UI, Account, Preferences, and Security tabs share the desktop title row and wrap below it on narrow screens. Account contains Profile and Linked accounts. Preferences contains Appearance, Language, and Notifications. Security groups authenticator, password, API token, recent sign-in, and MapToPlay MCP controls. Account actions, the three-dot menu beside the title, contains Delete account.

Select My Page from the same account menu when you want to view your public community profile instead of changing private account settings.

Profile, notifications, appearance, and language

On Account in the Web UI, change your username, first name, or last name, then choose Save changes. Unsaved profile edits stay in place when switching tabs. Your email address is shown for reference and is not edited here. Change the account avatar from My Page on your community profile, not from Settings.

In Preferences under Notifications, turn browser alerts and MapToPlay news email on or off. Your choice affects account delivery preferences; items can still appear in the in-app notification center when they require your attention.

In Preferences under Appearance, choose System, Light, or Dark. System follows the current operating-system preference. In Language, choose a supported interface language. These account choices apply to the platform; the Editor has its own local appearance controls.

Email check-ins and support

When MapToPlay news email is enabled in Settings → Preferences → Notifications, you may receive a small number of personal check-ins from stan@maptoplay.com about getting started, your map progress, or supporting the project. These messages are limited rather than repeated for every attempt. Replying pauses the automatic check-ins. Select Stop these emails in a message and confirm to stop them and turn off news email for your account.

A failed task or export, or an active Patreon benefit that has not been linked, may receive a separate service check-in. Repeated failures are grouped into one message. These check-ins respect a reply or stop request too. A check-in does not mean a failed task has already been fixed; use Tasks or Resources → Exports to see its current status.

For help, use the game guides in the documentation, join Discord from the website, or email stan@maptoplay.com. Pro and Ultra subscribers have dedicated support and can be offered a link to book a support session. Support messages may be reviewed with AI assistance, and a person approves replies before they are sent; see the Privacy Policy for details.

The monthly support-session allowance is one for Pro and two for Ultra. Completed and upcoming sessions count in the calendar month they take place; cancelled sessions free the allowance. An extra booking may be declined with a calendar notification and an email offering to continue support by email. Use the email address on your MapToPlay or Patreon account when booking so your subscription can be recognized.

If news email is enabled, you may receive one capacity check-in after waiting for Task units or reaching storage, project, or processing-time limits. It explains recovery options and may mention larger paid allowances. Repeated limits do not generate repeated upgrade reminders; Usage shows your current limits and replenishment times.

Connected Google and Patreon accounts

Use Linked accounts to link Google for sign-in or Patreon for subscription benefits. Follow the provider sign-in window, approve the connection, and return to MapToPlay. The connected state is shown on the settings page.

Before unlinking Google, create a MapToPlay password if Google is currently your only way to sign in. Patreon benefits are assigned to a team from the Usage page; linking Patreon by itself does not choose which team receives them.

Enable multi-factor authentication

In Security, select Set up authenticator app. The Web UI opens setup in a dialog. Closing it preserves the pending setup until you finish or leave Settings; select the setup action again to reopen it. Scan the QR code with an authenticator app, or copy the displayed secret into the app manually. Enter the current code from the app and confirm setup.

Save the recovery codes somewhere separate from the device that holds the authenticator. You can generate a fresh set of recovery codes or disable MFA from the same panel, but MapToPlay asks for a valid authenticator or recovery code before making that security change.

Password, API token, and login activity

In Security, select Change password to create a password for an account that was created with Google or to replace the current password. Enter the requested current credentials and the new password, then save.

Select the API token row in Security to open its dialog. Reveal the token only when a trusted MapToPlay integration asks for it, use Copy to avoid transcription errors, and choose Regenerate if it may have been exposed. Regeneration immediately invalidates the previous token, so update every integration that used it.

Select Recent sign-ins in Security to open its dialog. Its panel lists recent access with the date, device, authentication method, and network address. Review it after a security alert or unexpected sign-in. Change your password, regenerate the token, and review linked accounts if an entry is not yours.

Connect an AI agent with MCP

Open MapToPlay MCP at the end of Security to let ChatGPT or Claude work in your team. MCP is not available on Basic. Follow the connection guide for the whole setup in plain steps. A connection stops working if its team drops to Basic; Revoke connection stays available either way.

Delete the account

Open Account actions beside the Settings title and select Delete account. Read the warning, enter the requested username exactly, and confirm only after transferring any team or project ownership that must survive. Deletion removes your profile images and the reusable source uploads of teams you still own. Other members keep profile images that can move to another team they belong to.

Account deletion is not a troubleshooting or sign-out action. Use Log out from the account menu when you only want to end the current session.