How can we help?

Use Operator login with the email address and password of your XS1 account. Accounts are issued by XS1, so there's no public sign-up.

Your first sign-in starts from the set-up link in your invitation email.

Ask an XS1 administrator for a reset link. It goes to the email address on your account and works once.

If you're still signed in somewhere, open Settings › Account and email yourself a link instead. It goes to your recovery email.

Each link works once and expires after a while. Ask for a new one, or contact support and say which email address it was sent to.

1. Open Settings › Account and find Two-step verification.
2. Choose Turn on and scan the QR code with an authenticator app, such as Google Authenticator, 1Password or Authy.
3. Enter the 6-digit code the app shows to finish.

From then on, XS1 asks for a code from the app each time you sign in.

Check that your phone's time is set automatically: codes depend on the clock. If you've lost the app or the phone, contact support from your account's email address. We'll confirm it's you before changing anything.

Password set-up, reset and account-recovery links go there. Use a personal address you control: it's your way back in if you lose access to your sign-in email. Set it in Settings › Account.

Open Settings › Account and find Where you're signed in. It lists every browser and XS1 Desktop signed in to your account, roughly where each was last used, and when. The one you're using says This device.

• Choose Sign out beside a device to end that session straight away. XS1 Desktop does the same from its own settings.
• Choose Log out of all devices to end every session, this one included. You'll need to sign in again everywhere.

If you see a device you don't recognise, sign it out, then change your password and turn on two-step verification.

With the same XS1 account you use on the website: your email address, your password and, when two-step verification is on, a code from your authenticator app.

The app checks XS1 for updates by itself and installs only updates signed by XS1. What changed in each version shows in the app.

Your chats and runs, the models available to you, your usage and the apps you've connected. Connected apps are shared with your account on the website.

Linked providers are managed on the website only, in Settings › Providers.

Your account may not include XS1 Desktop yet. Contact support and we'll look into it.

Only runs on XS1's own models. Runs on ChatGPT, Claude, OpenRouter or any other provider never count toward your XS1 limits: those providers have limits of their own.

There's a 5-hour window and a weekly window. Each starts with your first run on XS1's models and resets on its own. Settings › Usage shows how much of each you've used and when it resets.

New runs on XS1's models don't start until the window resets. If you have banked usage and Use banked usage when I reach a limit is on in Settings › Usage, your balance is used first. Runs on other providers aren't affected.

Those are the provider's own limits, set and reported by the provider. Settings › Usage shows them under Provider limits, separate from your XS1 usage.

When a provider says you've reached a limit, Settings › Usage shows when it resets. XS1 doesn't stop your runs over a provider's limits; only the provider can.

Where usage history is available for your account, Settings › Usage shows it: how much you used, on which models and where. It never shows what you wrote.

1. Open Settings › Providers and choose ChatGPT · Codex.
2. Choose Sign in with ChatGPT. XS1 shows a code.
3. Approve the code on chatgpt.com. The card shows Connected when it's done.

1. Open Settings › Providers and choose Claude.
2. Choose Sign in with Claude and sign in on Claude's own page.
3. Claude shows a code. Paste it into XS1 and choose Finish.

Your Claude runs then use your own Claude plan. Your Claude login stays with Claude; XS1 never sees it.

Linking your own plan by signing in may need to be switched on for your account first. The workspace owner can do that. Until then you can save an API key instead.

Yes: an OpenRouter key, an Anthropic API key or an OpenAI API key. Keys are stored encrypted and never shown again; XS1 shows only their last four characters.

Open Settings › Providers, choose the provider and then Disconnect.

Open Settings › Profile. Under Edit profile, change your name, @handle, time zone, work or instructions for XS1 and choose Save profile. A new picture is saved as soon as you choose it.

XS1 Desktop can change your picture, name, work and instructions too. It's one profile: a change made in either shows in both.

Your standing preferences, such as how long answers should be or which spelling to use. They're added to every message you send to XS1: on the website, in XS1 Desktop and to your cloud agents. What best describes your work is added the same way.

They are preferences only: they never override permissions or tools, and never reach anyone else's work. Up to 4,000 characters. Set them in Settings › Profile.

It decides where your days start and end in your usage history and on your profile. Set it in Settings › Profile, or use your device's time zone.

A year of your usage, day by day, with totals such as your busiest day and your longest streak. It counts usage only, never what you wrote.

A short summary of your runs over the last 12 months: how often you used each reasoning effort, the connected apps you called most, and the skills you used (how many different ones, and how many times in all). It shows once there is something to show. XS1 keeps counts and names only, never what you or your agents wrote.

Operators who work in the same XS1 division can form an organization, one division each. In Automation and Cyber, members' cloud agents can ask each other for help. Members see each other's @handle and picture, never names or emails. You need a handle to join.

To invite someone, type the email address of an operator you know. If it belongs to someone who can join, they get a short email and the invite waits in their Settings › Organizations for 7 days. Open Settings › Organizations.

Each organization has its own page in its division, under Organizations in the sidebar: who helps with what, when members are around, and the ground rules. My terms on that page is yours alone: how your agents answer members' requests, which of them take part, and your usual hours. A request you take on runs on your own plan and apps, like your other runs.

What works, on the page's shelf: playbooks in Automation, runbooks in Cyber, protocols in Biosciences and methods in Intelligence. Run one as your own mission or add it to your own Task Force; nothing starts until you do. You can fork one, and say whether it worked. Nobody sees who said so, your own answer isn't in the counts, and counts show from 3.

Automation, Cyber and Biosciences have a rota for recurring jobs that members take turns on. Cyber's Scope lists the authorizations members offer, for information only. Biosciences' Registry lists validated material; a target gene still needs a study for that gene with an approved biosafety review. Intelligence's Coverage shows which source types members cover.

Apps your agents can use for you, such as the tools you already work in. You choose exactly which of an app's tools agents may use, and nothing runs until you allow it. Manage them in Settings › Connections.

Connections appears once your account works in at least one XS1 division. If you think it should be there, contact support.

Yes. They belong to your account, so the website and XS1 Desktop use the same ones. Keys for them are stored encrypted.

In Settings › Connections, choose the app, then Manage and Disconnect.

The privacy notice lists everything XS1 holds about an account, why, and for how long.

No. You sign in on ChatGPT's or Claude's own page, so your password for them never reaches XS1.

Send a privacy request. Say what you'd like us to do and which email address it concerns.

Send a security report. The disclosure policy explains what to include and what happens next.

Send a support message. Say what you were trying to do, what happened instead and roughly when. We reply within 1–2 business days.

Don't share it. XS1 never asks for your password or a code, by email or anywhere else. If a message claiming to be from XS1 asks, report it.