Passwords and Account Security
Password rules, two-factor authentication and keeping your account safe.
Password Rules
- 12 to 128 characters. No symbol or number rules, and passwords don't expire.
- Not one of the most common passwords.
- No parts of your name, email or company name.
- Not a password found in a known data breach.
Tip: four or five random words make a password that's long, easy to remember and hard to guess.
Change Your Password
Settings > Security > Password: enter your current password, the new one twice, then Change Password. This signs you out on your other devices.
Forgot Your Password
- On the sign-in page click Forgot Password?
- Enter your email and click Send Reset Link.
- Open the email and set a new password. The link works once and expires after 30 minutes.
Change Your Sign-In Email
Settings > Security > Sign-In Email: enter the new email and your current password, then Change Email.
Locked Out?
After 5 failed attempts in 15 minutes, sign-in pauses for 15 minutes. The message says how long to wait. Still stuck? Your administrator can reset your password from Settings > Users.
Asked to Choose a New Password?
If your old password no longer meets the rules, you'll see Choose a New Password after signing in. Pick one that follows the rules above.
For Admins: Require 2FA for Everyone
Settings > Security > Require 2FA for Everyone makes every user set up 2FA at their next sign-in. Users without 2FA are signed out when you turn it on.