Passwords & security
Password rules, changing and resetting, and what happens to your other devices.
Passwords in SellerTower follow one policy everywhere, and the two ways of getting a new one — changing it while signed in, or resetting it when locked out — both end the same way: every signed-in device starts over.
Who can do this: everyone, for their own account.
The password rule#
At least 8 characters, with an uppercase letter, a lowercase letter, a number and a special character. The strength meter under the field (Weak / Fair / Good / Strong) is advice; the rule above is what is enforced.
Changing your password (signed in)#
- Open User settings from your avatar menu.
- Enter your current password and the new one, and save.
Resetting a forgotten password#
- On the sign-in page, press Forgot password?. Pick Administrator or Staff — staff also enter the Business alias.
- Press Send code. You will always see "Code sent — check your email, and the spam folder if you don't see it" — for your protection the page never confirms whether an address has an account.
- Type the 8-character code from the email. Codes expire quickly; Resend code issues a fresh one (a few resends are allowed).
- Set the new password — same rule as above — and sign in with it.
A completed reset, like a change, signs out every device.
Day-to-day security behaviour you'll notice#
- Sign-out is per device. Only a password change or reset sweeps all devices.
- Sessions renew silently; a long-idle device eventually lands back on sign-in with the session-expired notice.
- If your account is disabled by the Administrator while you work, the app signs you out with "This account has been disabled. Contact your administrator."
Troubleshooting#
| You see | Why | What to do |
|---|---|---|
| "Must be 8+ characters with an uppercase letter, a number and a special character" | The new password misses part of the rule | Add the missing kind of character — and include a lowercase letter too |
| "new password must be different from your previous password" | Reusing the old password | Pick a genuinely new one |
| "invalid otp" | Wrong or mistyped code | Copy the full 8-character code from the newest email |
| "otp has expired" | The code outlived its window | Press Resend code |
| "Failed to reset the password. The reset link may have expired." | Too long between code and new password | Start again from Forgot password? |