Reset a password

Applies to Workletto 1.x.

Passwords are 10 to 128 characters. Changing or resetting one signs that person out everywhere else, so a device they left signed in somewhere no longer gets in.

Click the picture to zoom in.Close

Change your own password

1. Open the account menu: your name at the bottom of the sidebar. On a phone or a narrow window, open Menu instead.
2. Choose Change password.
3. Enter your current password, the new one, and the new one again, and click Change password.

You stay signed in on this device. Everywhere else, you’re signed out.

If you’ve forgotten your password

When your app can send email, the sign-in page has a Forgot your password? button. Enter your email address and click Send reset link. If that address has an account, a link arrives within a minute or two; look in your spam folder too. The link works once, for 1 hour. The page says the same thing whether or not the address has an account, so it can’t be used to find out who works with you.

Otherwise, ask an admin for a reset link (below).

Opening a reset link shows a page headed “Choose a new password” with your email on it. Enter a new password and click Save password. You’re signed in straight away, and signed out everywhere else.

If the page says “This link doesn’t work”, the link has expired or was already used. Ask for a new one.

Make a reset link for someone (admins)

1. Open Manage, then People.
2. Next to the person, click Reset link. You can’t make one for yourself (use the account menu instead), for someone who hasn’t joined yet (invite them instead), or for an account that is turned off.
3. Workletto shows a box headed “Send this link to” their name, with the link selected. Click Copy link and send it to them, in an email or a chat message.

• The link works once, for 24 hours.
• You see it only now. Making a new link for the same person replaces the old one.
• Anyone with the link can set that person’s password, so send it only to them.

How this is kept safe

Only a scrambled hash of each reset link is stored, so nobody who reads the database can use the links. A link stops working once used. Attempts to use made-up links, and requests for links by email, are slowed down after a few tries from the same address. The Security & data page under Manage describes the current setup.