Password recovery
If you have forgotten your password or your account has been locked, you can set a new password yourself through a one-time link sent by email. Recovery starts from the sign-in page.
Requesting a recovery link
- On the sign-in page click Forgot password?. When corporate identity providers are enabled, the link is on the step with the DataForge password. The Enter email address dialog opens
- Enter the account email address and click Restore password
- The dialog closes and the message "A password recovery link has been sent to your email address" appears
The same dialog also opens from the Restore access button in the lockout message on the sign-in page.
Notes:
- The response is the same whether or not the address is registered, so it is not possible to find out from it whether an account exists
- No more than 3 recovery requests per 60 seconds are accepted from one address
- If the account has the Not activated status, the activation email is resent instead of the recovery email
- No email is sent for an account that has been deactivated by an administrator
Setting a new password
The link from the email opens the Password recovery page. The link is valid for 1 hour from the moment it is created and can be used once.
| Field | Requirements |
|---|---|
| New password | Required. From 8 to 60 characters, containing at least one letter and at least one digit, without spaces |
| Confirm password | Required. Must match the new password |
Click Save. The message "Password changed successfully" appears, you are signed in with the new password, and the request is recorded in the audit log. Setting a new password also lifts an account lockout, including a permanent one.
If the link has expired, has already been used, or is incorrect, the page shows "The reset password link is invalid" together with the Reset password again action, which reopens the request dialog. The Return to login page link takes you back to the sign-in page.
Changing a known password
A signed-in user changes their password from their own profile, in the Security block. This requires the current password. See the profile page of this section.