Team and access

Resetting a password

An administrator sets a new one. Nobody can read the old one back.

Team & access, find the person, set a new password. Tell them, and tell them to change it.

Passwords are stored as a bcrypt hash. Nothing in the system can read one back — not us, not an administrator, not the database owner.
Five wrong attempts lock a login for a while. Setting a new password clears the lock immediately.
There is no self-service reset by email, because there is no mail sender in the product.

If the person locked out is the only administrator, that is the one case to telephone us about — and it is a good reason for a hotel group to have two.

More in Team and access

The roles, and what each can doSix roles. Most support calls are somebody trying something their role forbids. Adding somebody to the teamCreate login, give them a role, and choose which hotels they can see. Which hotels a person seesBy default, all of the group. Grant specific hotels and they see only those. Letting the Asar team inWe cannot enter your account uninvited. Access is granted, time-boxed and logged.