My account security (password and passkeys)

Changing your password

1. Go to Settings → Security.
2. In the Change password section, type your current password, your new password, and confirm it.
3. Click Save password.

The new password can’t match any of your last 2 passwords.

Why does this matter? If you share sensitive credentials or manage licenses, your administrator account is a more attractive phishing target than an individual earner’s — use a password you don’t reuse on another platform.

Session and password policies

To protect your administrator account, the platform applies these rules:

• Sign-out after inactivity: your session closes after 8 hours without activity. Sign in again to continue.
• Password change every 90 days: when your password expires, the platform takes you to the screen to create a new one when you sign in.
• No repeated passwords: you can’t reuse either of your last 2 passwords.
• Lockout after failed attempts: after several failed sign-in attempts, access is temporarily locked.

🔎 Note: if you sign in without a password (with a passkey), the 90-day change doesn’t apply. The new password screen also offers you to switch to Google, Microsoft or a passkey.

Passkeys (passwordless sign-in)

A passkey lets you sign in with your fingerprint, Face ID, or a physical security key (the FIDO2/WebAuthn standard), without typing a password.

1. In the Passkeys section, click Add passkey.
2. Follow your operating system’s or browser’s instructions to register the method (fingerprint, facial recognition, or physical key).
3. The passkey is listed with the device and registration date; you can delete it with the trash icon if you switch devices or no longer use it.

Why use passkeys instead of just a password? They remove the risk of a password leaked from another site being reused to log into Acreditta — it’s the sign-in method we recommend if you administer accounts with high-volume licenses.