You can change your DMARCER password whenever you like from the Your Profile page. Before it accepts a new password, the form asks for your current one, so even if someone finds your account already signed in, they cannot change your password without knowing the old one. This article shows you where to find the option, the exact steps to follow, what your new password needs to include, and the usual reasons a change might be turned down.
Where to find it
Open Your Profile from the account menu. The page is titled Your Profile and is where you update your details, password and multi-factor authentication. At the top you will see a summary you cannot edit (your email, company, MFA status and last sign-in), and below it some cards you can edit. The one you want is headed Change password, on the right of the lower row next to Your details.
Step by step
- Go to Your Profile and find the Change password card.
- In Current password, enter the password you sign in with today.
- In New password, type the password you would like to use instead. A strength gauge appears under the box as you type.
- In Confirm new password, type the new password again so we can check for typos.
- Click Change password.
When the change goes through, the page reloads with a green confirmation that reads: Your password has been changed. It takes effect straight away. You stay signed in on this device, and you will use the new password the next time you are asked to sign in.
What your new password must satisfy
DMARCER checks how strong your password is and only accepts one that reaches High on the gauge. The gauge under the New password box shows exactly the same result we use to decide, so if it reads High your password will be accepted. Each of the points below counts towards your score, and you need at least five out of six:
- At least 8 characters long.
- At least 12 characters long (a second point for length).
- Contains a lower-case letter.
- Contains an upper-case letter.
- Contains a digit.
- Contains a symbol (anything that is not a letter or a digit).
In practice, the easiest way to reach High is to use a passphrase of 12 or more characters that mixes upper and lower case, a number and a symbol. If the gauge sits on Medium, the password is turned down with a prompt to add more length or more types of character, and Low is turned down too. The reminder shown on the field is: Password is too weak. Aim for High on the strength gauge.
Validation messages and what they mean
- Current password is incorrect: the value in the Current password box did not match your existing password. For your security we keep a record of the attempt. Re-enter it carefully, and check that caps lock is off.
- New password must be different from the current one: you cannot reuse your existing password as the new one. Please choose something different.
- Confirmation doesn't match the new password: the New password and Confirm new password boxes are not identical. Re-type both.
- Password is too weak. Aim for High on the strength gauge: the new password did not reach the strength required. Make it longer or add more types of character until the gauge reads High.
If you are asked to change your password at sign-in
An administrator can mark your account so that you need to set a new password. When that happens, signing in takes you straight to a password-change page before you can reach anything else. On that page you only set a new password (the same strength rules apply), and you are not asked for the current one, because the administrator has already requested the reset. Once you save, the requirement is cleared and you carry on to where you were heading. Changing your password from Your Profile in the usual way also clears any such outstanding request.
If you cannot sign in to reach the page
The Change password card is only available while you are signed in. If you have forgotten your password and cannot sign in, use the Forgot password link on the sign-in page to ask for a reset email, then follow the link in that email to set a new password. For security, the message you see looks the same whether or not we find a matching account, so do check your inbox (and your spam folder) for the reset email.
A note on multi-factor authentication
Changing your password does not affect your multi-factor authentication: your authenticator app and recovery codes keep working as before. If you have not turned MFA on yet, the Multi-factor authentication card on the same Your Profile page lets you set it up with Set up MFA, and we strongly recommend it as an extra layer of protection alongside a strong password. Depending on your organisation's policy, MFA may be required, optional or switched off, and the card will tell you which.