Change your password and keep your sign-in safe
Change your password in Settings → Account & Security, and what Todah does to protect your sign-in: lockouts, automatic sign-out and signing other devices out.
Your password is yours alone; nobody at Todah can see it, because Todah stores only a scrambled version. Change it whenever you think someone else may know it.
Good to know: If you were added to a team with a temporary password, Todah asks you to choose your own the first time you sign in, on a page titled "Choose your own password". Type a new password twice and choose Save Password; the app then opens. Nothing else in the app works until you do this.
Step by step
- In the menu on the left, choose Settings.
- Choose the Account & Security tab.
- In the Password card, type your Current Password.
- Type your New Password, then type it again in Confirm New Password.
- Choose Change Password. The message "Password changed" appears and the boxes empty.
What each box means
| Current Password | The password you signed in with today. |
|---|---|
| New Password | At least 8 characters, the same rule everywhere in Todah. A short sentence you can remember is stronger than a short word with symbols. |
| Confirm New Password | The same new password again, to catch typing mistakes. |
What happens next
- You stay signed in on this device.
- Every other device or browser signed in to your account is signed out the next time it does anything.
- The change is recorded in the Audit Log.
Messages you might see
| Your current password is not correct | The first box does not match your password. If you have forgotten it, sign out and use "Forgot your password?" on the sign-in page. |
|---|---|
| Those two passwords do not match. | The two new-password boxes are different. Type them again. |
| Use at least 8 characters. | The new password is too short. Choose a longer one. |
| Your new password must be at least 8 characters | Choose a longer password. |
How Todah protects your sign-in
- After several wrong passwords in a row, the account is locked for a short while and the sign-in page says "Too many failed attempts. Try again shortly." The attempts are recorded in the Audit Log.
- If you are inactive for about an hour, Todah signs you out. Anything you were doing when you were active is saved as you go; just sign in again.
- Resetting your password from an emailed link signs you out everywhere, including the browser you used.
- Two-step sign-in adds a code from your phone after your password. It is the strongest protection Todah offers.
Tip: Use a different password for Todah than for your email. If your email password leaks, your books stay safe.
See also
Was this helpful?
Still stuck? Write to us or email support@todah.ca — a person reads every message and replies by email. The FAQ covers plans, prices and the questions people ask before they sign up.