If you forget your password

Forgot password? sits under the password field on the sign-in screen. Press it and the rest of the job happens in your inbox.

1. Ask for the link

   Type your account email and press Send reset link. The screen turns into "Check your inbox" and tells you how long the link lasts.

2. Open it

   The link works for 60 minutes, and it works once. Opening it shows the address it belongs to, so you can see you are resetting the right account.

3. Set the new one

   At least eight characters. Save it, and sign in with it.

Ask twice inside a minute and no second link is sent. The first one is still in the inbox and still valid, and sending another would have killed it.

The screen answers the same way for an address that has no account. That is deliberate: somebody typing your staff members' addresses into it learns nothing about which of them work here.

What the reset does to everything else

Setting the new password signs out every session on every device, including the one you are sitting at. You sign in again with the new password, and so does everyone using your account on the tablet in the Wash House.

It also cancels any emailed sign-in link that is still outstanding. If you are resetting because you think somebody has been reading your email, that closes the door they would otherwise have walked back through.

Two-factor is untouched. The code screen still comes after the new password — see Two-factor.

Changing it while you are signed in

Settings, then Security, then the Password card. Current password, new password, confirm it, press Update password. The new one has to be at least eight characters and cannot be the one you are already using.

This is the everyday version: you stay signed in on this device, and your other devices are signed out. Use it after a staff member has watched you type at the counter, or on the schedule you keep anyway.

If you signed up with Google

There is no password on the account to forget, and the reset flow is how you add one. Type the address, open the link, set a password. Continue with Google still works afterwards — you end up with two ways in rather than a swap. See Ways to sign in.