Account security

Your dashboard account protects your leads, API keys and team. These settings live in Settings in the dashboard.

Change your password

Open Settings → Password → Change password, enter your current password, then the new one (8 to 128 characters).

Changing your password signs you out on every other device and browser. The browser you used stays signed in.

If you forgot your password, use Forgot password? on the sign-in page. Resetting it by email signs you out everywhere, including the browser you used.

Both also disconnect the AI assistants you connected by signing in to Klozeo (ChatGPT, Claude and other MCP clients): connect them again afterwards. API keys are not affected, so automations that use a key keep working. To cut off a key, revoke it under API keys.

Change your login email

Open Settings → Account → Change email address, enter the new address and choose Continue. Confirm your identity with your current password and, if two-factor authentication is on, a code from your authenticator app or an unused backup code. Klozeo then sends a link to the new address. An address another Klozeo account already uses can’t be chosen.

Open the link within 24 hours. Until then, your current address stays your login email. Resend link sends a new link and the previous one stops working; Klozeo sends at most 3 links an hour. Use another address replaces the pending change, and Cancel email change cancels it.

Your current address also gets an email with a Cancel this change link. It opens a page where you confirm the cancellation, and works until the change is confirmed.

Once you open the link, the new address is your login email. The browser where you asked for the change stays signed in, and every other device is signed out. API keys and connected AI assistants keep working. Pending team invitations sent to your previous address follow you to the new one, and billing emails go to the new address. Your previous address gets a last email confirming the change: if you didn’t make it, contact [email protected].

Signed-in devices

Settings → Signed-in devices lists every browser signed in to your account: browser and system, IP address, when it signed in and when it was last active (to the day). The browser you are using is marked This device.

• Sign out next to a device ends that session.
• Sign out everywhere else ends every session except this one.

A signed-out device loses access on its next request and has to sign in again. A session also ends by itself after 7 days without activity. Signing a device out does not disconnect AI assistants or API keys: manage them under MCP and API keys.

Two-factor authentication

With two-factor authentication on, signing in asks for your password and then a 6-digit code from an authenticator app (Google Authenticator, 1Password, Authy, or any TOTP app).

To turn it on, open Settings → Two-factor authentication → Turn on two-factor and enter your password. Scan the QR code with your app, or type the key shown under it, then enter the code the app shows. Klozeo then shows 10 backup codes, only once. Save them somewhere safe: each one signs you in once if you lose your phone. On the sign-in page, choose Use a backup code.

After 10 wrong codes in a row, sign-in with a code is blocked for 15 minutes.

The code is asked at every sign-in, including when you sign in to connect an AI assistant (ChatGPT, Claude). Assistants already connected, and API keys, keep working.

To turn it off, open the same card, choose Turn off two-factor and enter your password. If you lost both your app and your backup codes, contact [email protected].