Setting or changing your password

Nobody at Asar chooses your password. New accounts arrive as a one-time link.

When a hotel group is signed up, we do not choose anybody's password. We create the account and issue a single-use link; whoever opens it sets the password, once. The link works once and lapses after seven days, and if it is lost the answer is a new link, not a copy of the old one — the old one cannot be read back by anybody, including us.

Inside a hotel:

• Your own password — an administrator can reset it from Team & access. There is no self-service "forgot password" email yet, because the product has no mail sender.
• Somebody else's — an administrator opens Team & access, finds the person and sets a new one. Tell them to change it.
• Passwords are at least eight characters. They are stored as a bcrypt hash; nothing anywhere in the system can read one back.

If a person leaves, do not reuse their login. Take their access away instead, and their name stays on everything they did — which is the point of a login.