Account
Reset your password
Request a reset link from the forgot-password page. The page always says the email was sent, so nobody can probe which addresses have accounts.
Updated
Steps
- Open the forgot-password page and enter the email address on your account.
- The page confirms that a link was sent. It says that whether or not the address has an account, so the form cannot be used to discover accounts.
- Open the link in the email and choose a new password. You are signed in on that browser straight away.
Reset tokens are single-use and expire; request another if yours has.
Accounts without a password
If you only ever signed in with Google, GitHub, X, Twitch or Instagram, there is no password to reset; sign in with the provider again. To delete such an account you confirm by typing your email address instead of a password.
How passwords are stored
As PBKDF2-SHA256 hashes with a per-user salt and 100,000 iterations. We never store or see the password itself, so support cannot tell you what it was.
Keeping the account safe
Sessions last 14 days on the website and 90 days in the extension; changing your password does not by itself end sessions on other devices, so also sign out where needed. If you suspect someone else has used your account, email support@slopsquash.com at once.