Getting in
Account
Account is the person, not one case. Contact keeps a mailing address, a phone, and an email, each with a default. Security is the login name, password, and passkey, plus recovery. Mail holds signatures and the Cc line for a letter.
In the works. A text code at sign-in is not sent. A password reset still goes to email: the login name, then each confirmed recovery email. Card numbers are not stored; Stripe takes the payment.
What you are looking at
Contact, payment, security, mail, news, and Working Group. The login name under your name is an email. The shield beside your name opens the Working Group — in color when you are a member, grey until then.
A recovery email starts as that login name. Extra confirmed recovery emails also receive a password reset. The first or only contact phone or email is the default.
What it is trying to accomplish
Facts about you are entered once and reused: a return address for a letter, a phone or email when a feature needs one, and a login that is a real verified email. A case can still override how that case reaches you.
If what you see on the screen does not match this, that is useful to know. Send feedback.