help: Add a page on protecting your account.

starlight_help/astro.config.mjs

@@ -170,6 +170,7 @@ export default defineConfig({
                         "switching-between-organizations",
                         "import-your-settings",
                         "review-your-settings",
+                        "protect-your-account",
                         "deactivate-your-account",
                     ],
                 },

starlight_help/src/content/docs/include/_ChangePasswordAndAPIKey.mdx

@@ -0,0 +1,20 @@
+import {Steps, TabItem, Tabs} from "@astrojs/starlight/components";
+import FlattenedSteps from "../../../components/FlattenedSteps.astro";
+import NavigationSteps from "../../../components/NavigationSteps.astro";
+import ZulipTip from '../../../components/ZulipTip.astro';
+
+<FlattenedSteps>
+  <NavigationSteps target="settings/account-and-privacy" />
+
+  1. Under **Account**, click **Change your password**.
+  1. Enter your old password and your new password, and click **Change**.
+  1. Under **API key**, click **Manage your API key**.
+  1. Enter your new password, and click **Get API key**.
+  1. Click **Generate new API key**.
+</FlattenedSteps>
+
+<ZulipTip>
+    If you've forgotten your password, you can [reset
+    it](/help/change-your-password#if-youve-forgotten-or-never-had-a-password)
+    using your email account.
+</ZulipTip>

starlight_help/src/content/docs/protect-your-account.mdx

@@ -0,0 +1,36 @@
+---
+title: Protect your account
+---
+
+import {Steps} from "@astrojs/starlight/components";
+import FlattenedSteps from "../../components/FlattenedSteps.astro";
+import NavigationSteps from "../../components/NavigationSteps.astro";
+
+import ChangePasswordAndAPIKey from "./include/_ChangePasswordAndAPIKey.mdx";
+
+Every Zulip user has an API key, which can be used to do essentially everything
+that you can do when you're logged in. You should treat your Zulip API key as
+carefully as you treat your password. Integrations should use a [bot's API
+key](/api/api-keys) rather than your own whenever possible.
+
+Be sure to change both your password and API key immediately in the following
+situations:
+
+- Accidentally sharing your password or API key with someone else.
+- Losing a device where you're logged in to Zulip (e.g., a cell phone or laptop).
+- Losing a device that has a downloaded copy of your [`zuliprc`
+  file](/api/configuring-python-bindings#download-a-zuliprc-file), which
+  includes your API key.
+
+Changing your API key will immediately log you out of Zulip on all devices.
+
+## Change your password and API key
+
+<ChangePasswordAndAPIKey />
+
+## Related articles
+
+* [Change your password](/help/change-your-password)
+* [Logging in](/help/logging-in)
+* [Logging out](/help/logging-out)
+* [Deactivate your account](/help/deactivate-your-account)