Password requirements for app users

A password for your app must be:

• at least 12 characters long
• with at least one lowercase letter
• at least one uppercase letter
• and at least one number

The register and reset pages state the rules and check them before submitting, so nobody finds out from an error message.

Forgotten passwords

The forgot-password page on your app emails a reset link. It always shows the same message, whether or not the address has an account, so it never reveals who has signed up.