Change a sign-in email safely
Keep sign-in identity, billing email and decryption recovery separate.
Open Security for the intended account
When several accounts are authenticated, choose the correct identity first. A workspace administrator does not control your personal recovery settings merely because you belong to that workspace.
Verify the new address
A secure change uses recent authentication appropriate to the account, verification of the new address and notification to the old address. If you cannot access the old address, use the identity-recovery route instead of creating a second account and assuming the two will merge.
Check what stays separate
A sign-in email change must not silently alter the billing email, transfer a workspace or reset encryption keys. An account credential reset is not a decryption-key recovery method. Matching email text alone is not proof of ownership for an identity merge.