Account & Security
Password requirements
Updated 2026-09-09
Every EspressoDesk account, including agents you invite, must use a strong password. The rules are checked while you type and a strength meter shows how you are doing.
A password needs at least ten characters and a mix of upper and lower case letters, digits and a symbol. Passwords found in known public breaches are rejected, even if they satisfy the rules, because attackers try those first.
The simplest way to comply is a password manager generating a random passphrase per site. If you forget your password, use the reset link on the sign-in page: you receive an email and set a new password, which must meet the same rules.
What makes a good password here
- Length beats complexity: a phrase of four unrelated words is stronger and easier to remember than a short word with symbols.
- Never reuse the password of your e-mail account or of another tool.
- Store it in a password manager rather than in a note or a browser on a shared machine.
Changing or resetting it
- To change it, open Settings -> Security in your profile.
- If you forgot it, use the forgotten password link on the sign-in page and follow the e-mail.
- The reset link is valid for a limited time; request a new one if it has expired.
Good to know
An agent account can read every customer conversation in your workspace, so the password protects your customers' data and not only your own. Add two-factor authentication on top, and the password stops being a single point of failure.

