Your profile and settings

Settings → My Profile in the sidebar, or My Profile from your avatar menu in the header.

Four tabs: Edit Profile, Reset Password, Encryption, and My Accounts.

The other tabs remain available while protected profile details are loading or
temporarily unavailable.

Edit Profile

Address lookup

Start typing Address Line 1 and Swish suggests matching addresses. You will see Searching addresses...
while it looks, or No suggestions if it finds nothing.

Picking a suggestion fills in city and postcode too. If yours does not appear — a new build, a rural
address — type it in manually.

Select Save. You will see "Profile saved successfully!" If you changed your first name, last name,
or email, Swish also updates your sign-in identity and asks you to log out and sign in again so the new
identity is loaded. If that second update is temporarily unavailable, use Retry name and email update;
your protected profile changes are not repeated.

Reset Password

Changes the password you sign in with.

1. Current Password
2. New Password
3. Confirm New Password

A checklist ticks off as you type:

• At least 8 characters
• Letters (at least one capital), numbers & special characters — the examples given are
  -_!@#$%^&*, but any symbol counts (a ? or . works too); a space does not
• New password and confirm password must match

Spaces at the start or end of a password are ignored, so they do not count towards the eight
characters. Beneath the checklist, a strength rating moves from Weak upwards as you satisfy more of the rules.

Save and you will see "Password updated successfully." Until the new password meets every
rule, Save is refused and "Your new password doesn't meet every requirement yet." appears under
New Password.

This is your sign-in password, not your encryption passphrase. They are separate. Changing your
password does not affect your encryption, and does not put your data at risk. See
Your encryption passphrase.

Choosing a password

• At least 12 characters — longer than the minimum
• Unique to Swish
• Ideally from a password manager
• Not the same as your encryption passphrase

Encryption

Where your encryption keys are managed.

Changing your encryption passphrase

The Encryption tab lets you change a passphrase that you still know:

1. Current passphrase
2. New passphrase
3. Confirm new passphrase

The checklist updates as you type. A new passphrase must contain 15–128 characters, something other than
spaces, and no spaces at the beginning or end. Spaces between words are allowed; capitals, numbers, and
symbols are optional. Three or more unrelated words can be easier to remember.

Select Change passphrase. When the change succeeds, the current session remains unlocked. Use the new
passphrase the next time you unlock Swish.

What you cannot do here

There is no "recover my passphrase" option. Swish does not hold your passphrase or an unprotected copy of
your key, so changing it requires the current passphrase.

If you have forgotten it, read
If you forget your passphrase.

My Accounts

This tab shows the bank accounts managed through Akahu. Each row identifies the
bank, account type and name, and only the last four digits of its provider-supplied
account or card number. Credit-card numbers may already be masked, so their last
four digits are shown to help identify the card. Swish does not use an internal
account ID as the displayed account ending. This tab does not show balances or
transaction history.

Account status can be Active, Reconnect required, Disconnected,
Retained history, or Status unavailable. If status is unavailable, use
Retry Status; Swish does not assume that the bank is connected or
disconnected. If cleanup after disconnection is still being reconciled,
destructive actions remain locked until that work completes.

Connect Bank and Reconnect Bank take you to Accounts, which starts the
Akahu authorization flow. You can also review consent directly at
my.akahu.nz.

Revoking bank access

Select Revoke Accounts to stop Swish receiving new banking data. Keep
Banking Data is selected by default. When selected, existing accounts and
transactions remain as retained history, bank links are removed, and that data
is excluded from live budgets, funding, and reports.

Clear Keep Banking Data if you also want to remove the stored banking data.
Once Akahu access has been removed, the confirmation closes even if part of the
local cleanup needs an automatic retry; Swish reports the partial outcome.

Eligible retained accounts also offer Delete retained data. This permanently
deletes that account and all of its transactions, including notes, categories,
goal allocations, and affected historical goal spending. This cannot be undone.

Your dashboard preference

Not on this screen — use the Budgeter / Investor switcher in the header. The switch holds for as long
as you stay signed in; next time you sign in, Swish opens on the dashboard you chose during setup. See
Your dashboards.

Common questions

Does my email here change my sign-in email? Yes. After the update succeeds, log out when prompted and
sign in again to load the new email. Contact support if the identity update continues to fail.

Why does Swish want my address? For account records and to tailor location-relevant content. Like
everything else, it is protected.

Can I delete my account? Contact support — details in Help and feedback.

Can I export my data? Not currently. You can download individual documents from register items — see
Viewing and editing items.

Can I share records with my partner or adviser? Yes. Share only the register items and documents you
choose; do not share your password or encryption passphrase. See Shared access.

Permanently deleting your Swish account

Under My Profile → My Accounts, select Delete your Swish account.
Read the warning and type the exact lowercase word delete, then select
Permanently delete account. This removes your Swish financial records,
uploaded documents, settings, and connected bank access. The data cannot be
recovered. This is separate from revoking bank access or deleting retained data.

Keep the page open while deletion runs. Swish signs you out afterward. If the
request cannot be confirmed, some cleanup may already have occurred; use the
explicit retry option. After deletion, Swish first clears protected data from
this browser. If cleanup fails, choose Retry cleanup or Continue signing
out. Continuing accepts that some local data may remain. If navigation fails,
select Retry sign out. These cleanup and sign-out actions never repeat account
deletion.

The same cleanup choices apply to ordinary sign-out. Protected screens stay
closed throughout. Other open Swish tabs are not signed out by this process.