Admin Change Password

For account security Helios Calendar does not permit administrators to change their, or other users', admin account password within the administration console. Each admin user may only change their own password by performing the following steps.

Note: The following process is the same for new administrators creating their password for the first time, with the exception that their email is automatically generated and does not need to be requested by the user.

How to Change Your Password

• Click “Lost Your Password” at the Helios Calendar admin console login screen. Complete the form and submit it. An email similar to the following will be sent:

http://your_custom_password_link

To change your Helios Calendar admin password please click the link above. 
This password change request was submitted from IP: xxx.xxx.xxx.xxx

IMPORTANT!: Don't become a victim of phishing. Read the email and make sure the link is to your Helios Calendar install and double check the URL you are at before entering a new password.

ALSO IMPORTANT!: You should not use the same password for multiple accounts. When changing your Helios Calendar admin account password use something that is unique and difficult for other users to guess.

1. Click, or copy & paste into your favorite browser, the link provided in the email.
2. Enter your password, confirm it, and click the “Change Password” button to change your password.

When your new password has been accepted you will be returned to the login screen. Use your new password to sign in to your account.

Single Use Links

It is important to note that password reset links provided by Helios Calendar are single use. All of the following will result in the link being invalid:

• Using the link to reset the password.
• Logging in to the admin console after requesting the link but before using it to change the account password.
• Requesting a new link.

Attempts to use an invalid password reset link will result in redirection to the admin login screen. Future password changes will require the admin to request a new password reset link.

Password Strength

When the Password Strength setting is enabled passwords will be required to meet the following minimum strength requirements:

• Length of at least six (6) Characters
• Contain at least one (1) Number
• Contain at lest one (1) Capital Letter
• Contain at least one (1) Non-Alphanumeric Character

Password Security

Administrator passwords are stored in encrypted text form to secure user passwords and ensure even super privileged users (with server level database access) cannot determine what passwords are being used by Helios Calendar admins when viewing the database contents.

Additionally, passwords use a salt combination so that each encrypted password is unique. In the event that two admin users have the same password (while rare in practice, possible) the encrypted version of that password will be different for each user, further securing admin users.

These precautions are particularly important in cases where users do not employ password best practice and utilize a common password across multiple accounts.