Account Security
Protect your formbuild.io account with password controls, email-based two-factor authentication, session invalidation, and API-key hygiene.
Account security controls are under Dashboard → Settings → Security.
Change your password
Enter your current password and a new password containing at least eight characters, including at least one letter and one number. Changing the password invalidates older authenticated sessions so a previously copied session cannot continue accessing the account.
If you cannot sign in, use Forgot password on the sign-in page. Password-reset links are time-limited and can only be used once.
Email-based two-factor authentication
Enable Two-Factor Authentication to require a short-lived email verification code after the password step during sign-in.
Enabling or disabling 2FA requires the current password. After the setting changes, formbuild.io signs out active sessions and asks you to sign in again.
Keep access to the account email address current. It is required to receive sign-in verification codes and password-reset messages.
API keys
API keys provide programmatic access to forms and responses. Use a separate key for each integration, store it only in a server-side secret manager, and revoke it immediately if it may have been exposed. See REST API & API Keys.
Account deletion
Account deletion is permanent. Active subscriptions must be cancelled successfully before deletion can finish, preventing an account from disappearing while billing continues. Personal forms and associated response data are removed; team-owned form data is protected from being deleted merely because a collaborator leaves.
For help recovering access or investigating suspicious activity, contact support.