Passwords & Reset
Learn about nRouter password security standards, NIST complexity guidelines, and step-by-step instructions to securely reset a forgotten account password.
nRouter enforces a length-first password standard aligned with NIST SP 800-63B guidelines across all Pay as you go and Enterprise accounts. Passwords require at least 8 characters (maximum 128) with no forced character-type composition rules, maximizing security while eliminating arbitrary user friction. The same policy applies across registration, login, and self-service recovery.
Password standards & reset
- Length requirement: At least 8 characters (maximum 128) following NIST SP 800-63B. Long passphrases are recommended; no arbitrary character compositions are enforced.
- Resetting forgotten passwords: Request a reset link at
/forgot-password. Links expire after 1 hour and invalidate other sessions upon password update. TOTP 2FA remains required if enabled. - Change while authenticated: Navigate to Settings → Security and select Reset password. Submissions are rate-limited per email and IP address.
Next steps
- Logging in — All sign-in methods
- Two-Factor Authentication — Add TOTP and recovery codes
- Security Settings — Manage sessions, SSO, and MFA
Was this page helpful?