Outcome and audience
For every customer user and workspace administrator.
Before you begin
Use only the customer sign-in surface and your organization-approved identity method.
Where to go
Use Settings → Security for customer password changes, and the sign-in recovery link for forgotten passwords.
Complete the workflow
Keep the selected workspace, provider, period, currency, cost basis, and data-through date visible as you work.
- Complete mandatory temporary-password replacement before accessing customer data.
- Use a strong unique password and verify recovery messages before acting.
- Change a known password with current password, new password, and confirmation.
- Review active access after role, password, or account changes.
- Contact support without sending secrets or raw customer data.
Interpret the result
A successful password change revokes other customer sessions while preserving the current authorized session. Staff authentication remains separate.
Loading, empty, partial, and unavailable states
Loading preserves the current scope. Empty means no records match the authorized scope. Partial or stale data keeps its completed-through boundary visible. Unavailable or permission-denied states explain the missing prerequisite and never substitute zero or another provider.
Provider differences
Account security is provider-independent; provider credentials follow their own connection rotation lifecycle.
Synthetic example
Illustrative example · synthetic data Example: a Northstar Labs user changes a known password in Settings → Security and signs in again on another device.
Common mistakes
Do not use a staff login for customer access, reuse a temporary password, or paste a credential into a support request.