DECODA’s settings let you personalise your analysis experience. Access them from the user menu in the sidebar or at app.decodalabs.com/settings.
Profile
Display Name & Avatar
Set your display name, which appears in chat sessions and reports. Your avatar is automatically generated from your initials.
Expertise Level
Choose your expertise level to help DECODA calibrate the depth of its responses:
- Beginner - More explanations, simpler terminology, educational context
- Intermediate - Balanced technical detail with some explanation
- Expert - Dense technical output, assumes deep knowledge
Your expertise level flows into the AI’s system prompt, so it visibly changes the depth and tone of answers across both Ask and Agent modes. At Expert, DECODA assumes deep malware analysis knowledge, uses precise terminology, and focuses on findings rather than explanations (down to assembly-level detail). At Beginner, it defines technical terms and adds more educational context.
Work Role
Your role helps the AI tailor its analysis perspective:
- Student - Learning-focused with conceptual explanations
- SOC Analyst - Alert triage and detection-oriented
- Malware Researcher - Deep static analysis focus
- Threat Hunter - TTPs, detection rules, and adversary behaviour
- Incident Responder - Timeline, IOCs, and containment actions
- Security Engineer - Architecture and defence recommendations
- Other - General-purpose perspective
Custom Instructions
Add custom instructions (up to 2,000 characters) that are included in every conversation, giving the AI persistent context about your preferences or environment.
Your expertise level and work role work together with the
analysis perspectives to shape how the AI communicates. You can change these at any time.
Personalization
The Personalization panel controls how DECODA presents analysis results. Changes save instantly and apply to new conversations.
Choose the structure and length of analysis output:
| Format | Best for |
|---|
| Full Report | Complete analysis with all sections |
| Triage Card | Quick verdict, IOCs, and actions only |
| Incident Brief | Concise report for escalation tickets |
| Hunt Log | Hypothesis-driven hunt documentation |
Hunt Log is only available when your analysis perspective is set to Threat Hunter. If you switch away from that perspective, the format automatically reverts to Full Report.
Default Analysis Mode
Sets which mode new conversations start in - Ask or Agent.
Agent mode runs autonomous, multi-step analysis and consumes your monthly Agent allocation (credits). Setting Agent as the default means new conversations begin spending from that allocation. See
Analysis Modes for the difference between Ask and Agent.
Response Verbosity
Controls how much text DECODA produces: Concise, Balanced, or Detailed.
Verbosity is distinct from
Expertise Level. Verbosity changes
how much text you get; expertise changes the
terminology and depth of that text. You can pair a concise, expert-level response with a detailed, beginner-level one independently.
Appearance Theme
Choose your colour scheme: Dark, Light, or System. System follows your operating system’s appearance setting.
Analysis Perspective
The perspective shapes the depth, tone, and which sections are emphasised in both chat and reports. The four perspectives - Analyst, Professor, Reverse Engineer, and Threat Hunter - are documented in Analysis Modes.
Analysis Preferences
Auto-Triage on Upload
When enabled (default), every uploaded file automatically goes through the triage pipeline - hashing, YARA scanning, and classification. Disable this if you prefer to trigger triage manually.
Allow Web Search During Analysis
When enabled (default), the AI can search the web for threat intel, CVE details, and malware family information. Disable this for air-gapped environments.
Show AI Disclosure on Reports
When enabled (default), a visible AI-generated label appears on exported reports. Machine-readable metadata is always included for EU AI Act Article 50 compliance, regardless of this setting.
Email Notifications
When enabled (default), DECODA emails you about activity on your account.
DECODA sends the following emails:
| Email | When it’s sent | What it contains |
|---|
| Welcome | When you sign up | A short getting-started message with a link to your dashboard |
| Analysis complete | When a triage analysis finishes | The file name, processing duration, and a link to view results |
| Credits low | When your remaining Agent credits drop to 5 or fewer | Your remaining credits, plan, and renewal date |
| Credits exhausted | When you run out of Agent credits | Your plan and renewal date |
| Scheduled plan change | When a scheduled subscription change needs confirmation | The previous and new plan, with a link to confirm the switch |
| Account deletion | When your account is deleted | Confirmation of the deletion |
The Email Notifications toggle gates the analysis complete, credits low, and credits exhausted emails together. Turning it off also silences the credit warnings, so you won’t be emailed when your Agent credits run low or run out.
Unsubscribing
Every notification email includes a one-click unsubscribe link (and the one-click button shown by Gmail and Outlook). Unsubscribing turns the Email Notifications preference off for your account. To start receiving emails again, re-enable the Email Notifications toggle in Settings. Unsubscribe links expire roughly 90 days after the email is sent.
Security & Privacy
Authentication
Shows your current sign-in method - either Email & Password or OAuth with your provider. OAuth accounts cannot change their password here.
If you signed up with email and password, use the Send Reset Link button to email yourself a secure password reset link. To prevent abuse, you can request another link only after a 60-second cooldown.
Active Sessions
View all devices and browsers where you’re currently signed in. Each session shows:
- Device type and operating system
- Browser name and version
- Approximate location
- Last active timestamp
The device you’re using is labelled (this device). You can revoke any other session individually with Revoke, or use Log out of all devices to end all sessions except the current one. There’s no Revoke control for the current device - to end it, simply sign out.
Recent Activity
Review your most recent login attempts, including successful and failed attempts grouped by device.
Data Retention
Choose how long analysis data is kept before automatic deletion: 30, 60, or 90 days, or Never (the default).
When you set a 30, 60, or 90-day window, a daily background job permanently and irreversibly deletes chats, samples, reports, and related analysis data older than that window. Never means no automatic deletion takes place. Regardless of this setting, you can always delete individual samples manually.
Automatic deletion is permanent and cannot be undone. Lowering the retention window can remove older analysis data on the next daily run.
Usage Analytics
When enabled (default), DECODA collects anonymous usage statistics only. No sample or analysis content is ever collected.
Data Export
Download a copy of all your data, provided under your GDPR Article 20 right to data portability. Selecting Export downloads a single JSON file named decoda-export-YYYY-MM-DD.json.
The export covers the major categories of data tied to your account, including:
- Chats and messages
- Samples and reports
- Subscriptions, usage, and payments
- Credit transactions
- Sessions and login attempts
For security, the export excludes your stored API keys and the raw binary contents of uploaded samples (sample metadata is still included).
Delete Account
Account deletion is permanent and cannot be undone. All your samples, analyses, reports, and settings will be permanently removed.
