> For the complete documentation index, see [llms.txt](https://docs.1kosmos.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.1kosmos.com/authentication/1kosmos-mobile-application/application-capabilities/account-management.md).

# Account Management

***

### Capabilities in this category

<table data-view="cards"><thead><tr><th></th></tr></thead><tbody><tr><td>Multi-account support</td></tr><tr><td>Account onboarding</td></tr><tr><td>Account password reset</td></tr><tr><td>Account removal</td></tr><tr><td>Orphan account cleanup</td></tr><tr><td>Transfer accounts </td></tr></tbody></table>

***

### Multi-account support

Link and manage multiple organization accounts on a single device.

**What it does** — Allows a single user device to hold credentials and authentication state for multiple tenants or applications. Users switch between accounts from the home screen, and each account has its own OTP and authentication context.

**When to use it** — Users with accounts across multiple 1Kosmos-integrated organizations, contractors with multiple employer accounts, or consumers with logins to multiple services.

**Key details**

* Unlimited accounts per device (subject to admin policy)
* Per-account OTP display
* Independent authentication state per account
* Account-specific notification routing

***

### Account onboarding

Link a new tenant or application account to the device.

**What it does** — Registers a user account with the device and the 1Kosmos platform. Three onboarding paths are supported: scanning a QR code from an email invite using the app, scanning the QR code with the device camera, or tapping a registration link in an email.

**When to use it** — Initial registration of an account, adding a new account to a device that already holds others, or re-onboarding after device replacement.

**Key details**

* QR-based onboarding via app
* QR-based onboarding via device camera
* Magic link onboarding via email
* Invite expiration typically 72 hours (configurable by admin)

***

### Account password reset

Reset a tenant account password from within the app.

**What it does** — Allows users to reset their organization-level password directly from the app after biometric or PIN authentication. Eliminates dependency on helpdesk for password resets.

**When to use it** — When a user has forgotten their tenant password and needs to reset it without contacting IT.

**Key details**

* Biometric authentication required
* PIN fallback if biometrics unavailable
* New password applied immediately
* No helpdesk involvement required

***

### Transfer accounts to a new device

Move your 1Kosmos accounts from your current device (Device 1) to a new device (Device 2) without re-enrolling. Authorize the transfer on Device 1 with LiveID, then complete it by scanning the QR code shown on Device 2.

Available from app version 1.30.20 onwards.

**Before you begin**

* Both devices must be running app version 1.30.20 or later.
* LiveID must be enrolled on Device 1.
* Both devices need an active internet connection throughout the transfer. <br>

**Step 1 — Start the transfer on Device 1**

1. Open the 1Kosmos app.
2. Go to Menu and tap Transfer Accounts.
3. On the Transfer Accounts screen, read the Steps to follow section. Do not tap Continue yet — set up Device 2 first.

**Step 2 — Prepare Device 2** <br>

Open the 1Kosmos app on Device 2.

{% hint style="info" %}
On Device 2, do not register any biometrics or set a PIN. After installing the app, open it and go to the home screen—that is where the Restore button is available.
{% endhint %}

1. On the home screen, tap **Restore**.
2. On the **Restore Account** screen, tap **Transfer from another device**.
3. On the Before you continue screen, select the checkboxes and tap **Continue**.
4. A QR code appears on Device 2.

**Step 3 — Complete the transfer on Device 1** <br>

1. Return to Device 1 and tap Continue.
2. Select all the checkboxes, then tap Continue.
3. Verify your LiveID by capturing a selfie.
4. Once the LiveID scan completes, Device 1 is ready to scan the QR code.
5. Scan the QR code shown on Device 2.
6. Device 1 confirms the account was transferred successfully.
   \
   **Result:** Your accounts are now transferred from Device 1 to Device 2.

***

### Account removal

Permanently remove an account and all its data from the device.

**What it does** — Deletes a linked account and all associated credentials, OTPs, and authentication state from the device. The action requires user confirmation and is irreversible.

**When to use it** — Departing employees, deprecated accounts, or users moving to a new device who want to remove old accounts.

**Key details**

* Requires user confirmation
* All account data permanently deleted
* Other accounts on the device remain unaffected
* Generates an audit event in 1Kosmos logs

{% hint style="warning" %}
**Account removal is irreversible.** Once removed, an account cannot be restored without re-onboarding. Other accounts on the same device are not affected.
{% endhint %}

***

### Orphan account cleanup

Automatically detect and remove accounts that have been unlinked by an admin.

**What it does** — When an admin unlinks a device in the AdminX portal, the affected accounts become orphaned. On next app launch, the app detects the orphaned state, removes the affected accounts, syncs active accounts, and notifies the user.

**When to use it** — Automatic — no user action required. Triggers an `E_ORPHAN_ACCOUNT_REMOVED` event for audit logging.

**Key details**

* Automatic on app launch
* User notification on removal
* Audit event generated
* Available from app version v1.10.90 onwards

### Account management lifecycle

```mermaid
graph LR
    A[Invite sent by admin] --> B[Account onboarded]
    B --> C[Active account]
    C --> D{User or admin action?}
    D -->|User removes| E[Account removed]
    D -->|Admin unlinks| F[Orphan detected on launch]
    F --> E
    C -->|Forgotten password| G[In-app password reset]
    G --> C
```


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.1kosmos.com/authentication/1kosmos-mobile-application/application-capabilities/account-management.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.