User Passwords and Locked Accounts

Strong passwords are crucial to the security of your Foundation; they are the first line of defense in helping to keep your data secure. Admins can set user passwords at the time of account creation, and they can request password changes any time for user accounts as well. In the event users get locked out of their user accounts, often because they have forgotten their passwords, admins can unlock the accounts and trigger password changes upon next login. Encourage users to always keep passwords private; and if there is ever a reason to suspect a password has been compromised, then change the password immediately. For more information about security and passwords, check out this blog from Cory Brester, Foundant's Director of CRM & Information Systems. 

Change User Password

Admins have options for changing users' passwords.

• Option 1 - An admin in the system can set a new password with the added step of having the user change the password at next login. This option is often used when users forget their existing passwords or believe their passwords are not working.
• Option 2 - An admin in the system can prompt a password change without setting a password at the same time. This option can be used when admins have reason to believe a password change is necessary. Users may not have forgotten their passwords; admins simply want them to set new ones.  

Option 1

1. Navigate to the Users page and click the ID of the user whose password needs to be changed.
   
   
   
2. Click Set Password in the left-side menu, enter the New Password in the given field, and then click Save.
   • Check Temporary to prompt the user to create a new password during their next login attempt.
     
     
     
     • A banner will display in the user field indicating a password change is required at next login.
       
       
       

Option 2

1. Navigate to the Users page and click the ID of the user whose password needs to be changed.
   
   
   
2. Click Password Change in the left-side menu.
   • A banner will display in the user field indicating a password change is required at next login.
     
     
     

Unlock User Account

Users get locked out of the system after five unsuccessful login attempts. When an account is locked out, a warning message appears at the top of the account. An admin will need to unlock the account before the user can access the system again. When this occurs, consider resetting the password and triggering a password change for the user.

1. Navigate to the Users page and click the ID of the locked out user.
   
   
   
2. A locked account will show "Yes" in the Locked Out field. Click Unlock in the left-side menu to unlock the account.
   • Change the user's password by following the instructions above.