Email, password and sessions

Your email and password are the keys to your account, so changes to either are checked carefully. This article covers how to change them and what that does to your signed-in devices.

Change your email

1. Choose Settings in the user menu and stay on the Account tab.
2. Change Email. Enter your Current password when asked. Accounts without a password skip this.
3. Choose Save changes.
4. Open the confirmation email sent to the new address and follow the link within 60 minutes.

Until you follow the link, your account keeps the old address and the form shows the pending one. 360clash also emails the old address to warn that a change was requested. If you did not ask for it, change your password right away, which signs out every device. Then sign in again, choose Didn't ask for this? Cancel it. under the email field, and email [email protected].

When you confirm, you are signed out everywhere and must log in with the new address. If someone else confirmed the address first, the change fails and you can try another.

Change your password

1. Choose Settings in the user menu and go to the Security tab.
2. In the Password card, enter your Current password, the New password and Confirm new password.
3. Choose Change password.

The new password must be 8 to 128 characters and cannot appear in known data breaches. You are signed out everywhere, including this browser, and sent to the login page.

If your account signs in with Discord or Google and has no password yet, the card offers Send a password-reset email so you can set one.

Reset a forgotten password

1. On the login page, choose Forgot password?.
2. Enter your email address.
3. Follow the link in the email within 60 minutes and choose a new password. It must be 8 to 128 characters and include an uppercase letter, a lowercase letter, a number and one of ! @ # $ % & * ( ).

The page gives the same answer whether or not the address has an account, so nobody can use it to find out who is registered. A reset also signs you out everywhere. If you use two-factor authentication, a reset does not turn it off.

Sessions and logging out

• Choose Log out in the user menu to end your session in this browser only. Other devices stay signed in.
• Changing your password, resetting it or confirming a new email address signs out every device. Use this if you think someone else got in.
• You stay signed in on a device as long as you use 360clash there at least once every 30 days, until you log out or one of those changes happens.

Limits

To protect accounts, some actions are rate limited. If you hit a limit, wait and try again later.

If you are locked out, see Contact support.