Skip to main content
Activation links are short-lived JWTs. If you click an old one, or click it twice, you’ll see one of these:
  • jwt malformed: the link is corrupted or truncated (a mail client inserted a line break, or you copied only part of the URL).
  • jwt expired or an abort error on /auth/activate: the link has passed its lifetime.
Fix
  1. Request a new activation email from the login page.
  2. Copy the link directly from the email rather than typing it.
  3. Open it in the same browser you originally signed up in.

​
Login API returns 404 or 204

When you’re not logged in, calls like GET /api/health or GET /auth/me return 204 or 404 by design. That’s how the frontend detects “no session”, and it is not an error.
On self-hosted Postiz: if you are logged in and still see 404 on these endpoints, your backend URL is misconfigured. See Login endpoints return 404.

​
No activation email arrived

Check spam, then request a new link from the login page. If nothing arrives, email support@postiz.com from the address you signed up with.