diff --git a/starlight_help/astro.config.mjs b/starlight_help/astro.config.mjs
index e99c835675..1f923c5d4b 100644
--- a/starlight_help/astro.config.mjs
+++ b/starlight_help/astro.config.mjs
@@ -170,6 +170,7 @@ export default defineConfig({
"switching-between-organizations",
"import-your-settings",
"review-your-settings",
+ "protect-your-account",
"deactivate-your-account",
],
},
diff --git a/starlight_help/src/content/docs/include/_ChangePasswordAndAPIKey.mdx b/starlight_help/src/content/docs/include/_ChangePasswordAndAPIKey.mdx
new file mode 100644
index 0000000000..e9e4fbf6f1
--- /dev/null
+++ b/starlight_help/src/content/docs/include/_ChangePasswordAndAPIKey.mdx
@@ -0,0 +1,20 @@
+import {Steps, TabItem, Tabs} from "@astrojs/starlight/components";
+import FlattenedSteps from "../../../components/FlattenedSteps.astro";
+import NavigationSteps from "../../../components/NavigationSteps.astro";
+import ZulipTip from '../../../components/ZulipTip.astro';
+
+
+
+
+ 1. Under **Account**, click **Change your password**.
+ 1. Enter your old password and your new password, and click **Change**.
+ 1. Under **API key**, click **Manage your API key**.
+ 1. Enter your new password, and click **Get API key**.
+ 1. Click **Generate new API key**.
+
+
+
+ If you've forgotten your password, you can [reset
+ it](/help/change-your-password#if-youve-forgotten-or-never-had-a-password)
+ using your email account.
+
diff --git a/starlight_help/src/content/docs/protect-your-account.mdx b/starlight_help/src/content/docs/protect-your-account.mdx
new file mode 100644
index 0000000000..8a60207be6
--- /dev/null
+++ b/starlight_help/src/content/docs/protect-your-account.mdx
@@ -0,0 +1,36 @@
+---
+title: Protect your account
+---
+
+import {Steps} from "@astrojs/starlight/components";
+import FlattenedSteps from "../../components/FlattenedSteps.astro";
+import NavigationSteps from "../../components/NavigationSteps.astro";
+
+import ChangePasswordAndAPIKey from "./include/_ChangePasswordAndAPIKey.mdx";
+
+Every Zulip user has an API key, which can be used to do essentially everything
+that you can do when you're logged in. You should treat your Zulip API key as
+carefully as you treat your password. Integrations should use a [bot's API
+key](/api/api-keys) rather than your own whenever possible.
+
+Be sure to change both your password and API key immediately in the following
+situations:
+
+- Accidentally sharing your password or API key with someone else.
+- Losing a device where you're logged in to Zulip (e.g., a cell phone or laptop).
+- Losing a device that has a downloaded copy of your [`zuliprc`
+ file](/api/configuring-python-bindings#download-a-zuliprc-file), which
+ includes your API key.
+
+Changing your API key will immediately log you out of Zulip on all devices.
+
+## Change your password and API key
+
+
+
+## Related articles
+
+* [Change your password](/help/change-your-password)
+* [Logging in](/help/logging-in)
+* [Logging out](/help/logging-out)
+* [Deactivate your account](/help/deactivate-your-account)