Account & Support

Account Settings

Manage your account in the dashboard under Identity & Access → Account Settings.

Profile

View and update your email address. Change password with current password verification (minimum 8 characters).

Multi-Factor Authentication (MFA)

Enable TOTP-based MFA using any authenticator app:

  1. Click Enable MFA to generate a QR code and secret key
  2. Scan with your authenticator app (Google Authenticator, Authy, etc.)
  3. Enter the 6-digit verification code to complete enrollment
  4. Save the provided recovery codes in a secure location
Important: Recovery codes are one-time use. Store them securely. If you lose your device and recovery codes, contact support.

API Keys (Global)

Generate API keys for programmatic access to the Ngris API. Each key shows creation date and last-used timestamp. Keys can be revoked at any time.

Auth Tokens (Agent)

Create auth tokens for the Ngris agent. Each token can be scoped to a specific endpoint or tunnel. View status, creation date, and last-used timestamp.

GDPR Data Export

Download all your personal data as a JSON file. Includes: profile, endpoints, tunnels, domains, firewall policies, usage history, billing data, and login history.

Deleting your account

Ngris has two separate deletion actions, both driven from the dashboard. Pick the one that matches what you want to remove:

For your security, both deletions are dashboard-only and enforced server-side: they are refused for API keys and for the Iris assistant / MCP tokens (HTTP 403). You must be signed in to the dashboard, and you are asked to re-enter your password (plus your two-factor code if you have 2FA enabled) to confirm before either deletion goes through.

Delete this account

Found under Account Settings → Danger zone. This deletes the currently-active account and its endpoints, certificates and traffic history. You stay signed in and switch to another of your accounts.

  • You cannot delete your only account this way — the system refuses it. Use Delete my account instead.
  • Only the account owner can do this (requires the settings:delete permission).

The request is blocked (HTTP 409) if the account has any of the following. Resolve them first, then retry:

  • an active paid subscription
  • other active members
  • a positive credit balance
  • unpaid invoices

API: DELETE /api/account (owner-only).

Delete my account

Found under User Settings → Danger zone. This permanently closes your entire profile: your login and every account you own, together with their endpoints, certificates and traffic history. You are signed out and cannot sign in again.

The request is blocked (HTTP 409) if an owned account has an active subscription, other active members, a positive credit balance, or unpaid invoices. On each owned account cancel the subscription, transfer or remove members, withdraw any remaining credit and settle invoices, then retry.

API: DELETE /api/user (self-service; acts on the current user).

Which one? Delete this account removes a single account and keeps your login. Delete my account removes your whole profile plus every account you own, and signs you out for good. Both actions are irreversible.

Support Center

Access the support center at /support for help with your account.

Tickets

  • Create support tickets with subject, description, and file attachments (25MB max, 5 per message)
  • Reply to tickets with text and attachments
  • Close tickets when resolved
  • Rate ticket resolution (CSAT) after closing

Knowledge Base

Browse public knowledge base articles organized by category. No login required.