> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ndumed.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Change or reset your NduMed password

> NduMed password rules, how to change your password, how to reset a forgotten password by email, and how long reset and setup links stay valid.

Your NduMed password must be at least 12 characters long. You can change it at any time, and if you forget it you can reset it from the sign-in page with a link sent to your email address.

## Password rules

* **12 to 64 characters.** Long passphrases such as `river-lamp-orange-42` work well.
* **Not a common password.** NduMed rejects passwords found on lists of common passwords.
* **Not based on your username or the first part of your email address.**
* **Different from your current password.**

There are no rules about symbols, numbers or capital letters, and passwords do not expire.

## Change your password

**1. Open the change password page**

Go to `/account/change-password` on your hospital's NduMed address (for example `https://stmary.ndumed.co/account/change-password`).

**2. Fill in the form**

Enter your **Current password**, then your **New password** and **Confirm new password**.

**3. Save**

Select **Save password**. You see "Your password has been changed."

Changing your password signs you out on every other device and browser.

## Forgot your password

**1. Request a link**

On the **Sign in** page, select **Forgot your password?**, enter your **Username**, and select **Email me a link**.

**2. Check your email**

You see "If that account exists, a link to reset your password is on its way". NduMed shows this message whether or not the username exists, to protect accounts. Look for an email titled **Reset your password**.

**3. Choose a new password**

Open the link within **1 hour**, choose a new password, and save it. You are taken to sign in with "Your password has been reset. Sign in with your new password."

> [!NOTE]
>
> * A reset link works once. Requesting a new link cancels any older one.
> * Resetting your password signs you out everywhere and unlocks your account if it was locked.
> * Resetting your password does **not** turn off two-step verification. You still need your authenticator app or a recovery code.

## No email arrived

* Check your spam or junk folder.
* Make sure you entered your **username**, not your email address.
* Your account may not have an email address, or it may be wrong. Ask your administrator to check it in **Administration**, or to use **Send a reset link** on your account.
* If you requested several links in a short time, wait 15 minutes and try again.

## Links from your administrator

| Link | Valid for |
| - | - |
| **Set up your account** (new account) | 72 hours |
| **Reset your password** (forgot password, or sent by an administrator) | 1 hour |
| First administrator invitation | 72 hours |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.