diff --git a/internal/bridge/bridge_test.go b/internal/bridge/bridge_test.go
index 905dff2a..60e8bdd9 100644
--- a/internal/bridge/bridge_test.go
+++ b/internal/bridge/bridge_test.go
@@ -423,15 +423,27 @@ func TestBridge_AddressWithoutKeys(t *testing.T) {
 
 func TestBridge_FactoryReset(t *testing.T) {
 	withEnv(t, func(ctx context.Context, s *server.Server, netCtl *proton.NetCtl, locator bridge.Locator, vaultKey []byte) {
-		withBridge(ctx, t, s.GetHostURL(), netCtl, locator, vaultKey, func(bridge *bridge.Bridge, mocks *bridge.Mocks) {
+		withBridge(ctx, t, s.GetHostURL(), netCtl, locator, vaultKey, func(bridge *bridge.Bridge, _ *bridge.Mocks) {
+			// The settings should be their default values.
+			require.True(t, bridge.GetAutoUpdate())
+			require.Equal(t, updater.StableChannel, bridge.GetUpdateChannel())
+
 			// Login the user.
 			userID, err := bridge.LoginFull(ctx, username, password, nil, nil)
 			require.NoError(t, err)
 
+			// Change some settings.
+			require.NoError(t, bridge.SetAutoUpdate(false))
+			require.NoError(t, bridge.SetUpdateChannel(updater.EarlyChannel))
+
 			// The user is now connected.
 			require.Equal(t, []string{userID}, bridge.GetUserIDs())
 			require.Equal(t, []string{userID}, getConnectedUserIDs(t, bridge))
 
+			// The settings should be changed.
+			require.False(t, bridge.GetAutoUpdate())
+			require.Equal(t, updater.EarlyChannel, bridge.GetUpdateChannel())
+
 			// Perform a factory reset.
 			bridge.FactoryReset(ctx)
 
@@ -439,6 +451,12 @@ func TestBridge_FactoryReset(t *testing.T) {
 			require.Equal(t, []string{}, bridge.GetUserIDs())
 			require.Equal(t, []string{}, getConnectedUserIDs(t, bridge))
 		})
+
+		withBridge(ctx, t, s.GetHostURL(), netCtl, locator, vaultKey, func(bridge *bridge.Bridge, _ *bridge.Mocks) {
+			// The settings should be reset.
+			require.True(t, bridge.GetAutoUpdate())
+			require.Equal(t, updater.StableChannel, bridge.GetUpdateChannel())
+		})
 	})
 }
 
diff --git a/internal/bridge/settings.go b/internal/bridge/settings.go
index 7bd2af29..0734b56d 100644
--- a/internal/bridge/settings.go
+++ b/internal/bridge/settings.go
@@ -287,14 +287,16 @@ func (bridge *Bridge) FactoryReset(ctx context.Context) {
 		for _, user := range bridge.users {
 			bridge.logoutUser(ctx, user, true, true)
 		}
-
-		for _, user := range bridge.vault.GetUserIDs() {
-			if err := bridge.vault.DeleteUser(user); err != nil {
-				logrus.WithError(err).Error("failed to delete vault user")
-			}
-		}
 	}, bridge.usersLock)
 
+	// Wipe the vault.
+	gluonDir, err := bridge.locator.ProvideGluonPath()
+	if err != nil {
+		logrus.WithError(err).Error("Failed to provide gluon dir")
+	} else if err := bridge.vault.Reset(gluonDir); err != nil {
+		logrus.WithError(err).Error("Failed to reset vault")
+	}
+
 	// Then delete all files.
 	if err := bridge.locator.Clear(); err != nil {
 		logrus.WithError(err).Error("Failed to clear data paths")
diff --git a/internal/bridge/types.go b/internal/bridge/types.go
index 2454543e..f9aa85b2 100644
--- a/internal/bridge/types.go
+++ b/internal/bridge/types.go
@@ -26,6 +26,7 @@ import (
 type Locator interface {
 	ProvideSettingsPath() (string, error)
 	ProvideLogsPath() (string, error)
+	ProvideGluonPath() (string, error)
 	GetLicenseFilePath() string
 	GetDependencyLicensesLink() string
 	Clear() error
diff --git a/internal/vault/vault.go b/internal/vault/vault.go
index 5d9469ce..dc62a20b 100644
--- a/internal/vault/vault.go
+++ b/internal/vault/vault.go
@@ -185,6 +185,12 @@ func (vault *Vault) SetMigrated() error {
 	})
 }
 
+func (vault *Vault) Reset(gluonDir string) error {
+	return vault.mod(func(data *Data) {
+		*data = newDefaultData(gluonDir)
+	})
+}
+
 func (vault *Vault) Close() error {
 	vault.refLock.Lock()
 	defer vault.refLock.Unlock()
diff --git a/internal/vault/vault_test.go b/internal/vault/vault_test.go
index f8418030..6d004b17 100644
--- a/internal/vault/vault_test.go
+++ b/internal/vault/vault_test.go
@@ -77,6 +77,25 @@ func TestVault_Corrupt_JunkData(t *testing.T) {
 	}
 }
 
+func TestVault_Reset(t *testing.T) {
+	s := newVault(t)
+
+	// Write some data.
+	require.NoError(t, s.SetIMAPPort(1234))
+	require.NoError(t, s.SetSMTPPort(5678))
+
+	// The data was written.
+	require.Equal(t, 1234, s.GetIMAPPort())
+	require.Equal(t, 5678, s.GetSMTPPort())
+
+	// Reset.
+	require.NoError(t, s.Reset(s.GetGluonDir()))
+
+	// The data is gone.
+	require.Equal(t, 1143, s.GetIMAPPort())
+	require.Equal(t, 1025, s.GetSMTPPort())
+}
+
 func newVault(t *testing.T) *vault.Vault {
 	t.Helper()