How do I change or reset my password?
Two different situations, two different routes.
If you’re signed in: change it
- Open Account from your user settings.
- Find Change password.
- Enter the new password and save.
If you’re locked out: reset it
- On the sign-in page, choose Forgot your password?
- Enter your email address.
- You’ll be sent a code. Enter it to set a new password. If it doesn’t arrive, use the resend option on that screen.
The sign-in page never tells you whether an address is registered — that’s deliberate, so nobody can use it to discover who has an account. If you’re unsure which address you signed up with, try the one you’d expect and check that inbox.
Choosing a password
Passwords are hashed by the identity service and never stored in a readable form, so nobody at Indacas can tell you what yours is. Length beats complexity: a long passphrase you’ll remember is stronger than a short string with punctuation in it, and much easier to type on a phone.
Use a password manager if you have one. If you reuse a password from elsewhere and that other service is breached, your research data is only as safe as their security was.
If you have two-factor turned on
Resetting your password doesn’t get you past the second factor. If you’ve also lost your authenticator, you’ll need one of your recovery codes. See Two-factor authentication.