Password guidance
Choosing a password that lasts
The form asks for at least 8 characters with a mix of letters and numbers — treat that as the floor, not the target. Length beats cleverness:
- Prefer a passphrase of three or four unrelated words; it is easier to remember and harder to guess than a short scramble of symbols.
- Make it unique to your PCI account — reusing a password from another site imports that site's risk into this one.
- If you use a password manager, let it generate and store the password for you; that remains the strongest option of all.
Trouble resetting?
If the reset doesn't go through
Reset links are single-use and time-limited, so the most common failure is simply an expired link. Work through these in order:
- Request a fresh link from the forgot password page and use it soon after it arrives.
- Check your spam or junk folder, and make sure you are using the email address you enrolled with.
- After a successful reset, sign in again at the login page — old sessions are not carried over.
- Still stuck? Contact the team from the address on your account, describing what happens when you try. Never include a password in any message to us — we will never ask for one.