Change or reset your Leadnote password

You can change your Leadnote password from your profile whenever you like, and reset it from the sign-in page if you forget it. Both use the same password rules. The reset link in the email works for 1 hour and only once.

Password rules

Every new password in Leadnote must:

• be 8 to 200 characters long;
• contain at least one letter and at least one number;
• not be on the list of very common passwords, such as "password1";
• not be the same as your email address or the part of it before the at sign.

The password field shows a strength meter from Weak to Strong. The rules above are required. Going past 12 characters, or adding a symbol, only makes the meter stronger.

Change your password

1. Open Settings, then My Profile, and select the Security tab.
2. In the Change password card, enter your Current password.
3. Enter your New password and Repeat the new password.
4. Decide about Keep my other sessions signed in. Leave it unticked to be safe. When it is unticked, every other browser and phone is signed out and your trusted devices are removed. Tick it only if you want your other devices to stay signed in.
5. Select Change password.

A message confirms the change and says how many other sessions were signed out. Leadnote also emails you, so you will notice if someone else did it.

The new password has to differ from the old one. If you type the wrong current password several times in a row, Leadnote makes you wait a few minutes before you can try again.

On the mobile app, open Settings and choose Change my password.

Reset a forgotten password

1. On the sign-in page, select Forgot password?.
2. Enter the email address you use for Leadnote and select Send reset link.
3. Open the email titled "Reset your Leadnote password" and select Reset password.
4. On the Choose a new password page, enter your New password and Confirm new password, then select Change password.
5. Sign in with your new password.

Leadnote always shows the same message, "If an account exists for this email, we have sent a link to reset the password", whether or not the address has an account. This protects your team from people probing for addresses. Asking many times in a short while is limited, so request the link once and wait for it. If it does not arrive, read verification codes or emails not arriving.

What the reset does

Finishing a reset signs out every session on your account, including phones, and removes your trusted devices. Any other reset links still waiting stop working. Leadnote emails you a "password changed" notice. If you use two-factor, you will be asked for your code again at the next sign-in.

If the link says it has expired

The page shows "This reset link has expired or was already used". Select Request a new link. A link works for 1 hour and one time. A deactivated user does not receive a reset link, so a former team member cannot get back in this way.

When your Account Owner or Manager gives you a temporary password

An Account Owner or Manager can set a password for you, for example when you join or when you are locked out. They may mark it as temporary. After you sign in with it, Leadnote shows Choose your own password and does not let you into the app until you do:

1. Enter the Temporary password you were given.
2. Enter a New password that differs from it, and Confirm new password.
3. Select Change password and continue.

You can choose Sign out instead if you are on the wrong account. The same step appears in the mobile app. Admins who set passwords for others should read deactivate and offboard users.

First password from an invitation

If you were invited to a workspace, you choose your first password from the invitation link, which is valid for 7 days. The same password rules apply. If the link has expired, ask the person who invited you to resend it.

After changing your password

Open the Where you are signed in card in the same Security tab and check that only your own devices are listed, as described in sessions and devices. For stronger protection, turn on two-factor authentication.