Secure your sign-in and account

You manage your password and your sessions yourself under Settings > Security, whatever your role. Who else can reach your data is covered in Where your data is stored and who can access it.

Change your password

You stay signed in, and the new password applies from the next time you sign in. The portal requires at least 8 characters. The bar below the field also counts 12 characters or more, a capital letter, a digit and a symbol. With all four, it shows Very strong.

1. Open Security

   Go to Settings > Security.

2. Enter the new password

   In New password, enter the new password. The bar below shows how strong it is.

3. Repeat the password

   In Repeat password, enter the same password. The text Passwords match then appears below the field.

4. Save the password

   Click Change password. The portal shows Password changed.

If you are signed out and do not know your password, choose Forgot password? on the sign-in screen. How that works is covered in Signing in does not work.

Sign in with Google or Microsoft

Below the form on the sign-in screen of portal.modbuscloud.com are the buttons Sign in with Google and Sign in with Microsoft. If you choose one of them, Google or Microsoft checks who you are. Your sign-in is then as well protected as that Google or Microsoft account.

Sign out everywhere

Sign out on all devices ends every session of your account, on every computer and phone. The browser you click in is signed out too. Sign out in the menu under your initials only applies to that one browser.

If you suspect that someone else knows your password, change your password first and then sign out everywhere. The old password then no longer works when the sessions end.

1. Open Security

   Go to Settings > Security.

2. Start signing out

   Under Sessions, click Sign out on all devices. The portal asks whether you are sure you want to sign out everywhere.

3. Confirm signing out

   Click Confirm. The portal shows the sign-in screen.

Revoke access when a colleague leaves

Only an owner or admin can revoke access. Removing a colleague locks them out of your organisation. If they were listed by name under Who gets emails for alarms, they no longer receive that email either. An API key, a join code and a separately entered email address are not tied to their account. Check those separately.

1. Remove the team member

   Remove your colleague under Settings > Team members, as described in Remove a team member. They lose access to your organisation immediately.

2. Revoke join codes

   On the same page, under Join codes, click the bin icon next to every active code they know. With such a code, they could otherwise join again.

3. Revoke API keys

   Revoke the API keys they knew, as described in Revoke a key. A key belongs to the organisation and keeps working after they leave.

4. Open Notifications

   Go to Settings > Notifications.

5. Show the recipients

   In the Outgoing mail block, click Who gets it.

6. Remove the address

   If their address is still listed, click the cross next to each source (Remove). A separately entered address receives email even without an account.

The owner has no bin icon in the list. If the owner leaves, first have them invite a colleague with the role Owner. As soon as that colleague accepts, the old owner is an admin and you can remove them.

Choose the lowest role that is enough

Every team member sees all gateways of your organisation. The role decides what they can change on top of that. The lower the role, the less damage someone can do with a taken-over account.

The table shows which role fits which work.

Never give someone from your customer Read only. That role also sees the gateways of your other customers. If you want a customer to be able to look along, share a dashboard with a link. What each role is allowed to do is covered in Team members and roles.

The same applies to an API key. Under Permissions, select only what the integration uses, as described in Choose permissions.