How to Change or Set Your Moonetix Password

How do you change or set your Moonetix password?

Open Account in the sidebar, go to the Sign-in & security card, and click Change password in the Password row. Enter your current password and the new one twice. If you signed up with Google or Discord, the same row shows Set a password instead, and you confirm the new password with a 6-digit code from your email. Forgot your password? Click Forgot password? on the login page.

Which case are you in?

There are three ways to end up with a new password, and each one asks for a different proof that it is really you. Find your row, then jump to the matching steps.

Step by step: change your password

1. Click Account in the sidebar, under the Account heading. You can also click your avatar and username in the top right corner. The Account settings page opens.
2. Click Sign-in & security in the section menu at the top of the page, or scroll down to that card. Find the Password row. It shows a green Set badge and the note “Changing it logs out your other devices.”
3. Click Change password. The form opens below the button.
4. Fill in Current password, New password, and Repeat new password.
5. Click the Change password button under the form. You will see “Password changed. Other devices were logged out.”

Changing a password you already have does not need an email code. Your current password confirms it is you. This matches the advice in the OWASP Authentication Cheat Sheet, which recommends asking for the current password before a password change so that someone at an unlocked computer cannot quietly replace it.

Step by step: set a password if you use Google or Discord

If you created your account with Google or Discord, the Password row shows a gray Not set badge and says “You sign in with Google. Add a password to also log in with your email.” (or Discord). The Account security box at the top of the page also lists “No password yet” with a Set one link that takes you to this row.

1. Open Account and click Set a password in the Password row.
2. Click Email me a code. We send a 6-digit code to the email address on your account, and the button changes to Send a new code.
3. Type the code into Code from the email.
4. Fill in New password and Repeat new password.
5. Click Set password. You will see “Password added. You can now also log in with your email and password.”

Your Google or Discord login keeps working. A password simply gives you a second way in, and it lets you unlink Google or Discord later if you want to. See Log in with Google or Discord, and link accounts. Why a code here and not a current password? Because there is no current password yet, so the code proves that you control the mailbox. Why account changes need a code explains the idea in more detail.

Password rules

The strength meter under New password shows “Password strength” and ticks each rule off as you type. A password needs:

• At least 10 characters
• Uppercase and lowercase letters
• At least one number
• At least one special character

It also cannot contain the name part of your email address (the text before the @), a new password must be different from your current one, and the two fields must match. The longest password allowed is 200 characters, so a long passphrase works.

How to pick a strong one

Ten characters is the minimum, not the goal. CISA’s strong password guidance recommends at least 16 characters, a different password for every account, and a password manager to store them. The US standard for digital identity, NIST SP 800-63B, sets 15 characters as the minimum when a password is the only factor, and says services should allow password managers and pasting. Moonetix’s fields accept both, so let your password manager generate a long random password and fill it in.

On a phone

The sidebar is hidden on small screens. Tap More in the bar at the bottom of the screen and then Account, or tap your avatar in the top right corner. Tap Sign-in & security in the section menu, or scroll down to it, and follow the same steps. Most phone password managers offer to save the new password as soon as you submit the form.

Forgot your password?

1. On the login page, click Forgot password? next to the Password label.
2. On Reset your password, enter your Email address, complete the security check, and click Send reset code. You will see “If an account exists for this address, we sent a 6-digit code to it.”
3. On Choose a new password, enter the Reset code from the email, then New password and Repeat new password.
4. Click Save new password. You will see “Your password is reset and you are logged in.” and land on your dashboard.

The code expires in 15 minutes. No email? Check your spam folder, or click Send a new code after a minute. Typed the wrong address? Click Use a different email. This also works if your account never had a password, for example if you signed up with Google and now want to log in with your email.

The message on the reset page is the same whether or not an account exists for the address you typed. That is on purpose: it stops strangers from using the form to find out who has a Moonetix account. OWASP recommends exactly this kind of neutral reply for password recovery.

What happens after a change

• Your other devices are logged out, and saved logins from Keep me logged in on those devices end. The browser you are using stays logged in.
• We email you that your password was changed or added, and a notice appears under the bell icon in the top bar.
• The change shows as Password changed (or Password reset) in the Recent security activity card on the Account page, with the date and a partly hidden IP address.
• If you did not make the change, reset your password with Forgot password? right away and follow What to do if your Moonetix account is compromised.

Common messages

Frequently asked questions