Reset your password or get back in

Reset links last an hour and work once. Here's the flow, the rate limits you might hit, and what a reset changes about your sessions.

Last updated 2026-08-30

If you're locked out

Go to https://kitty.build/forgot-password and press Email me a reset link.

You will always see "Check your inbox — if that address has an account, a reset link is on its way." That message appears whether or not the address exists; it is deliberate, so nobody can use the form to discover who has an account.

The link works once and expires in an hour. Nothing after a few minutes? Check spam, then try again.

The email is subject "Reset your kitty.build password" with a link reading Choose a new password.

Setting the new one

At least 8 characters. Two things happen that you should know about:

  • Every other session is signed out. Anyone who had access no longer does — which is exactly what you want if a reset is a response to something suspicious.
  • Your email address is marked confirmed, since you just proved you can read that inbox.

Two-factor is not affected

A password reset does not turn off two-factor authentication. If you have 2FA on, you will still be asked for a code after signing in with the new password. If you have lost that second factor too, see two-factor authentication — there is no self-serve path, and it needs a human.

Rate limits you might hit

  • Reset requests: 5 per hour per address, 20 per hour per network, then "Too many reset requests — try again later".
  • Sign-in attempts: 8 failures locks that email-and-network pair for 15 minutes.

If you hit the sign-in lockout, waiting is genuinely the fix — there is nothing to unlock on our side.

Changing your password while signed in

Settings → SecurityPassword card. Current password, new password, confirm. Changing it signs out every other device, and tells you how many sessions it ended.

Seeing where you're signed in

Same page, the Active sessions card lists every signed-in device, marks the current one, and offers Revoke per row or Sign out others for all of them at once.

If password resets aren't available

Some deployments have no mail configured, in which case the page says so plainly and tells you to contact support. On kitty.build itself, mail is configured.

Frequently asked

How long is a reset link valid?
One hour, and it works once. Requesting a new one invalidates the previous outstanding link.
Does resetting my password disable two-factor?
No. You will still be asked for your authenticator code or a recovery code afterwards.
I never got the email.
Check spam first. The confirmation message is shown for unknown addresses too, so also confirm you used the address you actually signed up with.

Related articles

Still stuck?

Email info@foundergem.com with your account email and what you were trying to do. A human replies, usually within one business day.

Browse all articles