# Passwords and signing in

## Forgot your password?

On the sign-in page, click **Forgot password?** and enter your work email. If the address has an account, you'll get a reset link that:

- works **once**,
- expires after **60 minutes**,
- and can be requested up to **3 times an hour**.

The page shows the same message whether or not the email has an account. That's deliberate.

## Changing your password

Account menu → **Change password**. Passwords must meet the minimum length, and very common passwords are refused.

## Sign-in protection

Repeated failed attempts are throttled per network address and per account, and every attempt, successful or not, is written to the [activity log](/docs/activity-log).