Password policy for users

Who this applies to

• All customers and internal users who sign in with an email and password.

Sign in basics

• Your username is your email address.
• You sign in with your email and password, or with a one-time sign-in code that we email to you. The code expires in 10 minutes.
• There is no two-step verification setting at this time.

Password requirements

• 10 or more characters
• No required mix of numbers or symbols. We check real password strength instead.
• Common passwords and passwords found in known data breaches are not allowed.
• Do not reuse a password that you use on other sites.

How to create a strong password

• Use a passphrase with several random words. Example: river tulip taxi folder cloud
• Avoid personal info like names, addresses, or dates.
• Use a password manager to generate and store unique passwords.

Sign out of all devices

You can end every active session on every device, from the web app or the mobile app:

• Web: open Account. Next to Devices, select Sign out of all devices.
• Mobile: open Settings and tap the edit icon next to your name. Under Devices, tap Sign out of all devices. Your phone needs a connection for this.

Confirm in the Sign out of all devices? prompt. You are signed out on the device you are using too, and you need to sign in again.