Password Requirements

The current rule

• At least 8 characters.

• At least one number (0-9).

• Cannot match any password known to be in a public breach (we check against HaveIBeenPwned at signup and reset).

What changed

We previously required 12 characters with mixed case, a number, and a symbol. Loosening to 8 + number gets users into the product faster without meaningfully changing security - the breach-list check is the part that actually catches weak credentials.

My existing password still works

Yes. Any password that was valid under the old rule is still valid. You don't need to reset it.

Resetting your password

1. 1

   Click "Forgot password" on the sign-in page.

2. 2

   Enter your email address.

3. 3

   Open the reset link we email you.

4. 4

   Set a new password that meets the rule above.