> ## Documentation Index > Fetch the complete documentation index at: https://docs.guito.pt/llms.txt > Use this file to discover all available pages before exploring further. # Account security > Change your password, see and end sessions on your devices, and confirm your identity for sensitive actions. The **Security** tab, inside **Settings** (user menu), is where you change your password and see which devices are signed in. ## Change your password Click your avatar in the sidebar, go to **Settings**, and open the **Security** tab. Enter the new password. It must be at least 8 characters; guito rejects passwords that have appeared in known data breaches. For security, you're asked to confirm who you are before saving. If you sign in with a password, enter your current password. If you sign in with Google or Apple, guito emails you a code to enter here. In the mobile app, under **Settings -> Password**, if you don't remember your current password, tap **Forgot your password?** and confirm with the emailed code instead. As soon as the password changes, you're signed out on every device, including the one you're using. Sign in again with the new password. If you created your account with Google or Apple and never set a password, you can set one here for the first time by confirming your identity with the emailed code. You'll then be able to sign in with either a password or the method you have always used. ## App lock In the mobile app, guito can lock itself with your phone's Face ID, fingerprint or passcode. The first time you open the **Resumo** on a phone with Face ID or a fingerprint set up, guito tells you the lock is on and lets you continue with it or turn it off. The lock only starts working once you have seen that message. Each account's choice is kept on that device, including when you sign out and back in, and you can change it at any time in **Settings -> Privacy**, under **Require Face ID**. The lock screen shows your name and one button, **Use Face ID**. If Face ID or your fingerprint doesn't work, the phone's own prompt offers your passcode. After too many failed attempts, unlock the phone itself with its passcode, then try again. Turning the lock off in Settings asks you to confirm it's you. ## See and end active sessions On the same page, the **Active sessions** list shows the devices where your account has an open session. Each row shows the device type, when it was last seen, and the approximate location the session was started from. The device you're using right now is marked as **This device**. Open the **⋯** menu on the row for the device you want to disconnect, choose **Sign out**, and confirm. Your current device doesn't have this option. To disconnect all the others at once without affecting your current device, use **Sign out all**, next to **Other devices**. Signing out on a device, from the account menu, ends only that device's session. Your other devices, such as your phone, stay signed in. Ending a session can take up to about 30 minutes to take effect on the affected device. If you suspect unauthorised access, change your password as well. ## New-device access alert When your account is accessed from a device guito doesn't yet recognise, you get an email letting you know, with the device type, the approximate location, and the date. If it was you, there's nothing to do. If you don't recognise the access, the email tells you what to do: open **Settings -> Security**, sign out other devices, and change your password. The alert is only sent for new devices, not on every sign-in. On the website, guito recognises your browser even when you switch networks (another Wi-Fi or mobile data), as long as you don't clear its cookies. ## Keep the app updated Most improvements and fixes arrive without going through the store. The app downloads them in the background and applies them on its own when you come back to it after a few minutes away: it restarts in a few seconds, without asking (with app lock on, you may need to unlock it again). It never does this while you have a form not yet saved, a payment in progress or another window open, nor after a quick trip to another app (for example, to approve a payment in your bank's app). To apply a downloaded improvement without waiting, use **Update** in **Profile -> Settings**. Updates available in the App Store or Google Play also matter: they can include changes the app cannot receive on its own. When one is available, **Profile -> Settings** shows **Update in store**. Compatible improvements also reach supported older iOS builds. The installed version and build number appear at the bottom of **Profile -> Settings**. These numbers identify the app installed from the store; they can stay the same when you receive improvements in the background. If a version is no longer supported, you will need to install a newer version to continue. Finish and save your work before restarting or updating the app. ## Frequently asked questions On the sign-in page, use **Recover password** (in the mobile app, **Forgot your password?**) and enter your email. guito emails you a 6-digit code: enter it and set your new password right away, on the same device. The code opens a recovery that lasts 15 minutes and covers a single change; if that time passes, sign out and ask for a new code. The **Security** tab is for changing your password when you're already signed in. No. You can keep signing in with Google only, or with Apple only. If you want, you can set a password in the **Security** tab by confirming your identity with the emailed code. Open **Settings -> Security**, use **Sign out all**, and change your password. Once you change the password, anyone who had unauthorised access is locked out. The lock screen only unlocks. If it's your phone, you can always get in with the phone's passcode and then sign out from **Settings**. If a session ends while the app is locked, the lock stays on and the next sign-in asks you to unlock the phone again, whether you use Google, Apple, an email code or your password. That way, someone holding your phone can't get around the lock by signing out and back in with your Google account or a saved password. The session stopped being valid — for example because you used **Sign out all** on another device. guito notices on the next request or the next time you open the app, signs you out and returns to the sign-in screen with the message **Your session expired. Please sign in again.** Just sign in again. Whatever you were typing at that moment, such as a movement not yet saved, is not recovered. The sign-in worked, but guito didn't respond in time while opening your account. You stay signed in: tap **Try again** in a moment, without signing in again. To use a different account, tap **Use another account**, which signs you out and returns to the sign-in screen. ## Related pages How guito protects your data and what control you have over it. Download invoices, delete your account, and contact support. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.