Passwords
Changing your own password
Any user can change their own password from their profile settings.
- Click your avatar or initials in the top-right corner.
- Select Profile or Account settings.
- Go to the Password section.
- Enter your current password.
- Enter and confirm your new password.
- Click Save.
Your new password takes effect immediately. You will not be logged out of your current session, but any other active sessions will be invalidated.
Password requirements
Strawly enforces a minimum password strength. A strong password should:
- Be at least 12 characters long
- Include a mix of uppercase letters, lowercase letters, numbers, and symbols
- Not be a commonly used password
Admin: resetting another user's password
Admins can set a new password for any user. This is useful when a user is locked out or has forgotten their password.
- Go to Settings → Users.
- Click the edit icon next to the user.
- Find the Reset password section.
- Enter a temporary password.
- Click Save.
Share the temporary password with the user through a secure channel (not email in plain text). Ask them to change it immediately after logging in.
Note
Admins cannot see existing passwords — only set new ones. Passwords are stored as secure hashes.
Forgotten password (self-service)
If your Strawly instance has email delivery configured, you can request a password reset link from the login page:
- Go to the Strawly login page.
- Click Forgot password?.
- Enter your email address and submit.
- Check your inbox for a reset link.
- Click the link and set a new password.
If email delivery is not configured, contact your Strawly administrator to reset your password manually.
Changing the default admin password
The default admin account (admin@strawly.app) uses the password admin123. This must be changed immediately after deployment. See First Login for step-by-step instructions.