Passwords

All passwords held by DutyMan are one-way encrypted.

Members

Members do not need a password to log in. At login time they can submit either their registered name or their email address and receive an email with a time-limited login link. Following that link returns them to DutyMan logged in to their member account.

Members can assign themselves a password and log in by submitting it with their name. This omits the email loop.

Administrators

An administrator login name and password are set up when first registering with DutyMan and both can be changed subsequently. Together they are used to log in to the DutyMan administrator account. Passwords are also required to confirm certain administrator actions such as those that result in significant data deletion.

Administrators can also log in without a password

• by submitting an email address that is listed in Administrator Emails on the >Set Up >Security and Passwords page.
• by submitting their adminstrator login name and selecting an address from those listed in Administrator Emails on the >Set Up >Security and Passwords page.

In both cases they receive an email with a time-limited, One Time Password protected, login link. Following that link returns them to DutyMan logged in to the administrator account.

Password Recovery and Reset

Lost or forgotten passwords can be reset via the no-password email login for both members and administrators.