Passwords

Three paths, depending on whether you know your current password, have forgotten it, or never had one because you signed up with a social provider.

Resetting a forgotten password#

Use Forgot password on the sign-in screen. Governax always shows the same confirmation regardless of whether the address is registered, so the screen cannot be used to discover who has an account.

The reset screen names the two failure cases explicitly:

Changing your password in the app#

Open the account menu, then Account, then the Password panel. You need your current password, the new one, and a confirmation.

There is an option to sign out other sessions, ticked by default. Leave it on unless you have a specific reason not to; it is the difference between changing your password and actually removing someone else's access.

Setting a first password on a social account#

If you signed up through Google, Microsoft or GitHub, your account has no password. The Password panel detects this and offers Send setup link instead of a change form. It emails a link that lets you set a first password, using the same mechanism as a reset.

This is the prerequisite for two-factor authentication, which is not available on an account without a password. See Two-factor authentication.

Setting a password does not remove your social sign-in. Both continue to work, and both reach the same account.

Password rules#

There is no rule forcing a symbol, a digit and a capital. A long passphrase is both stronger and easier to remember than a short scramble, and forced complexity tends to produce predictable substitutions rather than genuine entropy.