# You're asked to change your password

> If InfraNest asks you to set a new password before letting you continue, nothing is wrong with your account — a policy in your organization has asked for it.

Source: https://infranest.io/docs/password-expired
Last updated: 2026-10-02

---

If InfraNest asks you to set a new password before letting you continue, don't worry — nothing is wrong with your account. This happens when your organization's security policy requires it.

## Overview
- Your password may have expired based on your organization's rotation schedule.
- An administrator may have required a reset, often after a security review or a possible exposure.
- You may have been given a temporary password that needs to be replaced now.

<!-- screenshot: password-expired -->

<!-- docs-screenshots:start:password-expired -->

![You're asked to change your password](/media/4b7000a1-0e56-4c47-9a14-bd055e449f2e)

<!-- docs-screenshots:end:password-expired -->

## Change your password
1. Enter your current password.
2. Choose a new password that meets the rules shown on screen — these cover length and whether a mix of characters is required.
3. Select **Save**. You'll continue straight into InfraNest — there's no separate sign-in step.

## Tips
- Longer is better than complicated. A passphrase made of a few unrelated words is stronger and easier to type than a short, scrambled one.
- Don't reuse a password from another service.
- Consider a password manager, especially if your organization rotates passwords often.

> [!TIP]
> A password manager makes it easy to generate and store a strong, unique password without having to remember it yourself.

## Troubleshooting
- **"Must be different"** — this means you've used this password before. Policies usually block reusing a recent password, so choose a new one.
- **It doesn't meet the rules** — check the requirements listed on the screen. The most commonly missed one is minimum length.
- **You've tried too many times** — sign-in attempts are rate-limited for security. Wait a few minutes and try again.

> [!NOTE]
> If you don't know your current password, sign out and use **Forgot password** instead. This sends a reset link to your verified email address.