Password changes and recovery
Change your INSIDE password or recover access through an emailed reset link, with optional password history and expiry.
What it is
Password lets you change your INSIDE password while signed in. If you forget it, an emailed reset link lets you choose a replacement.
Powerfront can enable recent-password checks and periodic password expiry for your website.
Who uses it and why
Operators maintain their own passwords. Users with the Settings role and operator permissions, or the Manager role with Allow Reset Password, can request recovery emails for permitted operator accounts.
Where to find it
Open Settings › Account › My Account, then Password to change your password.
Choose Forgot password? on Login to recover it. Users with the Settings role and operator permissions, or the Manager role with Allow Reset Password, can use Reset Password under Settings › Account › Operators.
Powerfront manages password-policy switches under Settings › General Settings › Admin.
How it works
To change your password while signed in:
- Open Password in My Account.
- Enter Current password, New password and Confirm password.
- Select Save.
The account screen checks your current password and requires matching new-password entries. Its password check requires at least eight characters, with uppercase and lowercase letters, a number and a supported special character. Use the strength indicator and respond to any validation message shown.
To recover a forgotten password, choose Forgot password?, enter your registered email address and select Submit. Follow the emailed link, enter and confirm your new password, and submit the form. A reset link lasts three days and cannot be reused after a successful reset.
Where expiry is enabled, a live-service password older than 180 days prevents password sign-in and triggers a reset email. Single sign-on accounts are exempt from local password expiry.
Configure it
Ask Powerfront to change Disable Reuse of previous passwords or Expire Passwords every 6 months. Both are off by default.
With reuse prevention enabled, supported change and recovery screens check the current password and retained history. INSIDE retains three recent password entries, including the current password. The recovery page also rejects a password equal to your sign-in email address.
For delegated recovery, enable Allow Reset Password in the manager's Manager Permissions, then save the operator account.
Settings
| Setting | Where | Applies to | Default | Who can change it | What it does |
|---|---|---|---|---|---|
| Disable Reuse of previous passwords | Settings › General Settings › Admin | website | Off | Powerfront | Reject a password that matches the current password or the retained recent password history in supported change and recovery screens. |
| Expire Passwords every 6 months | Settings › General Settings › Admin | website | Off | Powerfront | Require a password reset after 180 days in the live service for password-based operator accounts. |
Fields
| Field | Where | Required | What it is for |
|---|---|---|---|
| Current password | Settings › Account › My Account | Yes | Confirm your existing password before changing it. |
| New password | Settings › Account › My Account | Yes | Set the password you will use for subsequent password sign-ins. |
| Confirm password | Settings › Account › My Account | Yes | Enter the same new password again to check for typing mistakes. |
Permissions
| Permission | Lets you |
|---|---|
| Settings | Manage permitted operator accounts, subject to Settings Permissions. |
| Operators | Allow operator administration within Settings Permissions. |
| Manager | Manage permitted operator accounts, subject to Manager Permissions. |
| Allow Reset Password | Allow a manager to request a password-reset email for an operator. |
Limits and good to know
- Password rules differ between the account screen and recovery interfaces. Follow the validation shown in the screen you use.
- Recovery resets your two-factor setup. If your website enforces 2-Factor Authentication, you must set it up again at sign-in.
- Recovery attempts clear the failed sign-in count only when the account is enabled. Ask an authorised account manager to unlock a disabled account separately.
- Change an identity-provider password through your organisation's provider when you use single sign-on.
Depends on and works with
View all connections as a list
This feature uses
- Admin settings and feature switches · managed by PowerfrontConfigured by
Powerfront manages password history and expiry switches.
- Operator accountsRequires
Password changes and recovery need an existing operator account.
- Roles and permissionsConfigured by
Delegated permissions control administrative password recovery.
- Operator settingsConfigured by
Operators change their own password through My Account.
- Login and email verificationRelated
Use password recovery when you cannot complete password sign-in.
- Two-factor authentication for operator sign-inEnhances
Password recovery resets two-factor setup, which may need to be completed again.
- Single sign-on with SAML 2.0Related
SAML users manage their provider password separately and are exempt from local password expiry.
- Single sign-on with OAuth 2.0Related
OAuth users manage their provider password separately and are exempt from local password expiry.
Used by
- Operator accountsConfigured by
Password policies govern password setup, expiry and recovery for operator accounts.
- Login and email verificationConfigured by
Password checks, recovery and optional expiry affect password sign-in.
- Two-factor authentication for operator sign-inEnhances
Password recovery clears two-factor setup, so enforced authentication must be set up again.
FAQ and troubleshooting
Why is my old password being rejected as a new password?
Your website may prevent reuse. Choose a password different from your current password and the retained recent history.
Why does my reset link no longer work?
It may be more than three days old or already used. Request a new recovery email.
Why do I need to set up two-factor authentication again?
Password recovery resets two-factor setup. Complete the setup again if your website requires it.
Can a manager see my current password?
The recovery workflow sends you a link to choose a replacement. It does not display your existing password to the manager.
Why did I receive a password-expiry email?
Your website has periodic expiry enabled and your local password has reached the expiry period. Follow the reset link to set a new password.