# Reset Password

> At Purchase Plus, we are committed to keeping your procurement data secure. To align with modern cybersecurity \"best practices\"—which favor longer, more

Source: https://www.purchaseplus.com/docs/general/reset-your-password

Markdown: https://www.purchaseplus.com/docs/general/reset-your-password.md

# Reset Password
#### **Security Update: Enhancing Your Purchase Plus Password Policy**

At Purchase Plus, we are committed to keeping your procurement data secure. To align with modern cybersecurity "best practices"—which favor **longer, more complex passwords** over frequent, forced changes—we are rolling out updates to our password policy:

These changes are designed to make your account more resilient against modern "brute-force" attacks while reducing the friction of constant password resets.

  
**The Fine Print: New Requirements**

To ensure your account remains a fortress, new passwords must now meet the following criteria:

-   **Length:** Between **12 and 128 characters**.
    
-   **Complexity:** Must include at least **one digit**, **one lowercase letter**, and **one uppercase letter**.
    
-   **History:** The system will archive your last **5 passwords**. You cannot reuse these when setting a new one.
    

### **What Happens if I Get Locked Out?**

To protect against unauthorized access, we have tightened the locking threshold from 20 attempts to **5 failed attempts**. If you find yourself locked out:

1.  **Automatic Reset:** The account will automatically unlock after **1 hour**.
    
2.  **Manual Unlock:** You can use the standard "Unlock Instructions" flow (via the Devise email link) to regain access immediately.
    

> **Why the change?** Security experts (like NIST) now recognize that forcing users to change passwords every 90 days often leads to "password fatigue," where users choose weaker, predictable patterns. By moving to a 12-character minimum and removing forced expiry, we are prioritizing **strength** over **frequency**.

 _If you have forgotten the Email Address associated with your PurchasePlus account, you will need to [contact our friendly customer support team](https://www.purchaseplus.com/contact-us) for assistance._

### **Reset Your Password**

1\. Visit the PurchasePlus Sign In page, [https://purchaseplus.com](https://purchaseplus.com) and click \[**Need Help Signing In?**\]. 

![Need help signing in](/images/docs/general/reset-your-password-1.avif)  
2\. Select \[**Reset My Password**\].

![Reset My Password](/images/docs/general/reset-your-password-2.avif)

3\. Enter your 'Email Address' and click \[**Send Password Reset Instructions**\]. An email will be sent to the email address with a link to reset your password.

![Send Password Reset Instructions](/images/docs/general/reset-your-password-3.avif)

4\. If the email address you enter belongs to a user account in PurchasePlus, an email will be sent to the email address with a link to reset your password. Please check your Junk or Spam folder if you do not receive the email. 

![Reset Password Email](/images/docs/general/reset-your-password-4.avif)  
5\. After clicking the link in the email, you will arrive at the Set New Password page. **Please enter a new password that is at least 8 characters in length, and including at least 1 uppercase letter and 1 number.** 

![Set New Password](/images/docs/general/reset-your-password-5.avif)

Clicking **\[Set Password\]** will update your Password, and you will no longer be able to log in with your old Password.