Security alerts
The emails we send when something important happens on your account, and what to do if it wasn't you.
We email you straight away when:
- your account is signed in to from a new browser — with the browser, the country and the time;
- a Ghostunnel app is signed in to your account;
- your password is changed;
- two-factor authentication is turned on or off;
- someone asks to change your email address (sent to your current address).
Security alerts are always sent — turning off usage emails in Account settings doesn't stop them.
How we know a browser is new
When you sign in, we leave a small cookie in that browser (see the Cookie Policy). Next time, we see it and stay quiet. We don't keep a list of your browsers or their IP addresses on our side. Clearing your cookies or using a private window means you'll get an alert again — that's expected.
Wasn't you?
- Change your password right away — this also signs out your Ghostunnel apps. If you can't sign in, reset it.
- Turn on two-factor authentication.
- On Security, select Sign out everywhere else to end every other browser session and sign out your apps — or check Devices and sign out anything you don't recognise.
- Email [email protected] so we can help.
More in Privacy & security
What we log — and what we don't
We don't log your browsing, DNS lookups or connection history. Here's exactly what we keep, and why.
DNS and leaks
Your configuration sends all traffic and DNS lookups through the tunnel, so they don't leak to your network.
Your keys and configuration files
A website tunnel's configuration contains its private key. We show it once and don't keep it — keep the file and QR code private.
Report abuse or a security issue
Report misuse of our network to [email protected], and security vulnerabilities to [email protected].
Still need help?
Email our support team and tell us what you tried — a screenshot helps.