Password and sessions

This page explains how to change your password from Settings and how to choose how long you stay signed in without using the dashboard.

Change your password

Change password replaces your password with a new one while you are signed in. You find it on the Sign-in & sessions page of Settings.

1. Open Settings > Sign-in & sessions and go to Change password.
2. Enter your Current password.
3. Enter the New password and type it again under Confirm password. It must follow the password rules.
4. Click Update password.

The page says "Password updated." when it worked. A password change also does three things you should know about:

• Every other browser signed in to your account is signed out. This one stays signed in.
• Your API key is revoked. Generate a new one and update any script that used the old one.
• A notice goes to your recovery email.

If you have forgotten your current password, sign out and use Forgot password instead.

Session timeout

Session timeout is how long you can stay signed in without using the dashboard before EyalSec signs you out. The default is 24 hours; each time you use the dashboard, the clock starts again.

To change it, open Settings > Sign-in & sessions, go to Session timeout, pick a value under Sign out after inactivity, enter your password (and a 2FA code if you use an authenticator app), and click Save timeout. The box shows the current setting.

The new timeout applies at once to every browser you are signed in on, not only this one. With Never time out, a session still ends when you sign out, when you change your password, or when another security change signs your browsers out. Only choose it on a device nobody else uses.