Reset your password or get back in
Reset links last an hour and work once. Here's the flow, the rate limits you might hit, and what a reset changes about your sessions.
Last updated 2026-08-30
If you're locked out
Go to https://kitty.build/forgot-password and press Email me a reset link.
You will always see "Check your inbox — if that address has an account, a reset link is on its way." That message appears whether or not the address exists; it is deliberate, so nobody can use the form to discover who has an account.
The link works once and expires in an hour. Nothing after a few minutes? Check spam, then try again.
The email is subject "Reset your kitty.build password" with a link reading Choose a new password.
Setting the new one
At least 8 characters. Two things happen that you should know about:
- Every other session is signed out. Anyone who had access no longer does — which is exactly what you want if a reset is a response to something suspicious.
- Your email address is marked confirmed, since you just proved you can read that inbox.
Two-factor is not affected
A password reset does not turn off two-factor authentication. If you have 2FA on, you will still be asked for a code after signing in with the new password. If you have lost that second factor too, see two-factor authentication — there is no self-serve path, and it needs a human.
Rate limits you might hit
- Reset requests: 5 per hour per address, 20 per hour per network, then "Too many reset requests — try again later".
- Sign-in attempts: 8 failures locks that email-and-network pair for 15 minutes.
If you hit the sign-in lockout, waiting is genuinely the fix — there is nothing to unlock on our side.
Changing your password while signed in
Settings → Security → Password card. Current password, new password, confirm. Changing it signs out every other device, and tells you how many sessions it ended.
Seeing where you're signed in
Same page, the Active sessions card lists every signed-in device, marks the current one, and offers Revoke per row or Sign out others for all of them at once.
If password resets aren't available
Some deployments have no mail configured, in which case the page says so plainly and tells you to contact support. On kitty.build itself, mail is configured.
Frequently asked
- How long is a reset link valid?
- One hour, and it works once. Requesting a new one invalidates the previous outstanding link.
- Does resetting my password disable two-factor?
- No. You will still be asked for your authenticator code or a recovery code afterwards.
- I never got the email.
- Check spam first. The confirmation message is shown for unknown addresses too, so also confirm you used the address you actually signed up with.
Related articles
- Turn on two-factor authenticationSet up TOTP in about a minute, save your ten recovery codes — and understand why saving them matters more here than elsewhere.
- Change or confirm your email addressChanging your address needs your password, signs out your other sessions, and requires confirming the new inbox.
- How your data is protectedEncryption at rest, how credentials are stored, what the AI can and can't read, and honest answers about export and deletion.
Still stuck?
Email info@foundergem.com with your account email and what you were trying to do. A human replies, usually within one business day.
Browse all articles