Manage your account

Guardioz keeps your account settings on one page, Account Settings. Use it to change your password, to end sessions on other devices, to rename your organization, and to delete your account. You reset a forgotten password from the sign-in page, without signing in first.

To open Account Settings, click your email address in the top navigation.

Reset a forgotten password

You do not need to be signed in for this. A reset also works for an account created with Google or GitHub, so it is one way to give such an account a password.

On the sign-in page at https://app.guardioz.com/, click Forgot your password?.
In the Email field, enter the address of your account, and then click Send reset link. The page shows this message:
```
If an account with that email exists, we sent a password reset link. Check your inbox.
```
The message is the same whether or not an account exists, so it does not confirm that the address is registered.
Open the email Reset your password - Guardioz and click the button Reset password. The link is valid for 30 minutes. Your browser opens the page Set a new password.
On that page, enter the new password in both fields, and then click Reset password. Guardioz shows Your password has been reset successfully.
Click Login with your new password and sign in with the new password.

A finished reset ends every session of your account. You sign in again with the new password in every browser and on every device. A finished reset also ends the pause that follows 5 incorrect passwords in a row. An address that was not confirmed yet counts as confirmed after a reset, because opening the link is the same proof. When the reset is the first proof of the address, Guardioz then sends the email Welcome to Guardioz, as after a confirmation.

The form for the new password opens even when the link has expired. Guardioz reports an expired link only after you submit the form, with the message Invalid or expired reset link. Please request a new one. Start again at step 1 to get a new link.

If no email arrives, look in the spam folder and check the address for a typo. Guardioz sends at most one reset email per account every three minutes. It sends none to an address that has no account, and none to a disabled account. See Sign-in and email problems.

Change your password

You need your current password, and a recent sign-in. When your last sign-in is not recent, Guardioz asks you to confirm your identity first and does not keep the form. The section Confirm your identity before a sensitive action describes that detour.

An account created with Google or GitHub has no password yet. The Security section sets the first one, and you can then sign in with an email address and a password as well.

In the top navigation, click your email address. The Account Settings page opens.
In the Security section, complete Current password, New password and Confirm new password, and then click Change password. Guardioz shows the message Password updated. Your other browser sessions have been signed out.

For an account without a password, the Security section shows the text You signed up using a social login. You can set a password to also enable email login., two password fields and the button Set password.

A new password follows the same rules as at registration. See Create an account and sign in.

The session that you are working in stays signed in. Every other browser session of your account is ended. A refused change, for example after a wrong Current password, ends nothing.

A wrong Current password counts toward the same limit as a wrong password at sign-in. After 5 incorrect passwords in a row, Guardioz answers Too many incorrect passwords in a row. Try again in a few minutes (at most 15)., and sign-in with a password pauses for the same time on every device.

What you can change in Settings

Section	What you can change
Profile	Your Display name, and your Timezone from a list of time zones. Email, Account number and Member since are shown and cannot be changed.
Organization	The Organization name.
Notifications	The severity levels you receive email about: Critical, Warning and Suggestion. On the Free plan only Critical can be selected; Warning and Suggestion come with the Team and Scale plans. See Email alerts.
Security	Your password.
Connected accounts	Disconnect Google or GitHub.
Active Sessions	End sessions on other devices, or on every device.
Danger zone	Delete your account.

The Timezone that you choose applies to the clock times on the server pages, including the labels of the charts, and on the page of a finding group and of one object, which also name the time zone. The list on the Findings page states how long ago something happened instead of a clock time. The times in the Active Sessions list and in alert emails are always in UTC.

Connected accounts shows a Disconnect button for each provider that is connected to your account, and Not connected for each one that is not. Guardioz asks for confirmation in a browser dialog before it disconnects, and a disconnect needs a recent sign-in. A provider that is the only way into the account cannot be disconnected, and Guardioz then answers Cannot disconnect your only login method. Set a password first. A disconnect that removed the link answers Google disconnected or GitHub disconnected. When the provider is no longer connected, for example after a disconnect in another tab, Guardioz answers Google is not connected to your account (or the same with GitHub) and changes nothing. There is no connect button here: a provider is connected by signing in with it. See Create an account and sign in.

Settings has no way to change your email address. To change it, write to contact@guardioz.com, and we change it. Settings also has no way to invite another person into your organization, no API tokens and no two-factor authentication. It has no data export either: to get a copy of your data, write to contact@guardioz.com, and we prepare it.

Sessions and automatic sign-out

Guardioz signs you out after a period without activity. Shortly before that, a bar appears at the top of the page with the text Your session expires soon. and a button Extend. Extend starts the period again and reloads the page. A session also has a maximum lifetime. When it is reached, you sign in again, even when you were active the whole time and used Extend.

When the time runs out while a page is open, Guardioz replaces that page with the sign-in page. The page that you were working on is not restored after you sign in.

The Active Sessions section lists one row per active session, the newest activity first. One browser can hold more than one row, because a sign-in starts a new session and leaves the earlier one active. Each row shows the first part of the network address that the session signed in from, and the time of the last activity in UTC. A row for another browser also shows the start of the identification string that the browser sends, and the row of the browser that you are using now carries Current session in its place.

Three actions end sessions:

Revoke ends one other session.
Revoke all other sessions ends every session except the one that you are using.
Log out everywhere ends every session, including the one that you are using, and opens the sign-in page.

Confirm your identity before a sensitive action

Three actions need a recent sign-in: setting or changing the password, disconnecting Google or GitHub, and deleting the account. A recent sign-in means that you signed in, or confirmed your identity, in this browser a short time ago. A sign-in on another device does not count. When your last sign-in is not recent, Guardioz opens the page Confirm your identity and asks for your password. For an account that has no password, that page offers the button Confirm with Google or Confirm with Github instead, and you approve the request at the provider. A wrong password on that page answers Incorrect password and counts toward the same limit as a wrong password at sign-in.

The form that you submitted is not kept during this detour. Guardioz returns you to Account Settings with this message:

This action needed you to confirm your identity first, so the form was not saved. Please fill it in again.

Complete the form again and submit it. For a short time after you confirm, the same action goes through without another question.

Your organization

Each account belongs to exactly one organization. Registration with an email address and a password creates the organization at once. An account created with Google or GitHub has none until you complete the page One last step. Your servers, their snapshots and their findings belong to the organization, not to your user.

To rename it, open the Organization section of Account Settings, enter a new Organization name and click Save. Guardioz shows Organization name updated. A rename changes the name only, and your servers and findings stay attached.

Today a second account cannot be added to an organization, and Guardioz has no invitation flow. Two people who register with the same organization name get two separate organizations and do not see each other’s servers. Inviting more people into an organization is coming in autumn 2026.

Delete your account

Deleting your account also deletes your organization, because the organization has no other account. Guardioz deletes, at once:

every server of the organization, with its collector key, its snapshots, its findings and its machine profile;
your user, its connections to Google and GitHub, its browser sessions and its install commands;
the organization and its name.

Account Settings names the organization and the number of its servers above the button, so you can see what the deletion covers before you start.

The agent on each server is not part of the deletion. It keeps running and keeps reading PostgreSQL every interval, and Guardioz refuses every snapshot it sends, because its collector key is gone. Remove the agent from each server as a separate step. See Remove Guardioz from a server.

Deleting the account needs a recent sign-in. When your last sign-in is not recent, Guardioz opens the page Confirm your identity first and deletes nothing. You start the deletion again after you confirm. The section Confirm your identity before a sensitive action describes that page.

Remove the agent from each server, so that it stops reading PostgreSQL. See Remove Guardioz from a server. You can also do this after the deletion.
In the top navigation, click your email address. The Account Settings page opens.
In the Danger zone section, check the organization name and the number of servers, click Delete my account, and then confirm in the two browser dialogs. Guardioz signs you out and opens the sign-in page.

When you cannot sign in any more, for example because your account is disabled, write to contact@guardioz.com from the email address of the account, and we delete the account and its organization.

Next steps

Manage your serversLook at a server, edit it, or delete it with its collected data.

Email alertsWhen Guardioz sends an email and what it contains.

Get helpWhat to send us so that we can help without asking for more details.