Login
Start Free
Account & Security

Change or reset your password

Change a password you already know, reset a forgotten password, review password-recovery messages and secure your Estavo account when password access may have been exposed.

Around 5 minutes Password security Account recovery

Use the password-change process when you are signed in and know your current password. Use password reset when you have forgotten it or can no longer sign in through password-based access.

Password access

Choose the correct password process

Change a known password

Use Account & Security when you are signed in and know the existing password.

Reset a forgotten password

Use the password-recovery option on the Estavo sign-in page.

Secure a compromised account

Change or reset the password, end unfamiliar sessions and review other sign-in methods.

Use another sign-in method

A passkey or connected Google account may still provide access when password sign-in is unavailable.

Not every account relies on a password

Accounts created through Google sign-in or used primarily with passkeys may present different password options.

Preparation

Before changing or resetting the password

  • Confirm you are using the correct Estavo account.
  • Check that you can access the account email inbox.
  • Use a trusted device and network.
  • Close unnecessary shared browser sessions.
  • Review whether Google sign-in or a passkey is connected.
  • Prepare a new password that is not used elsewhere.
  • Do not send the new password to another person.
  • Do not save it on a device you do not control.
Password quality

Choose a secure and unique password

Use sufficient length Longer passwords or passphrases are generally harder to guess than short passwords.
Make it unique Do not reuse a password from email, banking, social media or another business system.
Avoid personal information Do not rely on names, birthdays, addresses or easily guessed business details.
Use a password manager A trusted password manager can create and store a unique password securely.
Do not share it Each authorised user should have individual account access.
Follow displayed requirements Complete any length or character requirements shown by Estavo.
Estavo support will not ask for your password

Never send a current or new password, reset code or reset link to support.

Navigation

Open the password settings

1

Sign in to Estavo

Use your current password, passkey or connected Google account.

2

Open the profile menu

Select your name, initials or profile icon.

3

Select Account & Security

Open the area containing password and sign-in settings.

4

Select Change Password

Open the password-update form where available.

Password update

Change a password you already know

Change password

Example password-update form.

Secure account action
Enter your current password
Create a unique new password
Enter the new password again
1

Enter the current password

Use the password currently associated with the Estavo account.

2

Create the new password

Follow the displayed password requirements and use a unique value.

3

Confirm the new password

Enter the same password again without copying an incorrect value.

4

Select Update Password

Wait for the account confirmation before leaving the page.

Verify completion

Confirm the password change completed

  • Review the confirmation message.
  • Check whether the current session remains active.
  • Review any security email received.
  • Sign out when appropriate.
  • Sign in again using the new password.
  • Update the stored password in your password manager.
  • Remove obsolete saved passwords from browsers you control.
Password recovery

Reset a forgotten password

1

Open the Estavo sign-in page

Go directly to the normal Estavo account sign-in screen.

2

Select Forgot Password

Open the password-recovery form.

3

Enter the account email

Use the email currently associated with the Estavo account.

4

Submit the request once

Wait for the password-reset message before sending repeated requests.

The account may use another sign-in method

Try Google sign-in or an available passkey when no password-reset message arrives and the account was created through another sign-in method.

Recovery message

Review the password-reset email carefully

  • Check that the message relates to your request.
  • Review the account email shown.
  • Use the reset link only on a trusted device.
  • Do not forward the email to another person.
  • Do not copy the link into a support message.
  • Open Estavo directly when the message looks unexpected.
  • Ignore or report reset messages you did not request.
Reset links are sensitive

Anyone able to use a valid reset link may be able to set a new password for the account.

New credential

Create the replacement password

  • Open the valid password-reset link.
  • Confirm the intended Estavo account.
  • Create a unique new password.
  • Follow all displayed password requirements.
  • Enter the password again where required.
  • Select Reset Password or the displayed action.
  • Wait for confirmation before closing the page.
  • Store the new password securely.
Restore access

Sign in using the new password

  • Return to the Estavo sign-in page.
  • Use the current account email.
  • Enter the new password.
  • Remove an old automatically filled password.
  • Check that the intended account opens.
  • Review active sessions and devices.
  • Check recent account activity when the reset was security-related.
Missing reset message

When the password-reset email does not arrive

  • Confirm the account email was entered correctly.
  • Check spam and junk folders.
  • Search the inbox for Estavo.
  • Allow a short period for delivery.
  • Check whether the account email changed recently.
  • Review whether the account uses Google sign-in.
  • Try a passkey where available.
  • Send one new reset request rather than many repeated requests.
Invalid recovery link

Replace an expired or previously used reset link

  • Return to the Estavo sign-in page.
  • Select Forgot Password again.
  • Enter the current account email.
  • Use only the newest password-reset message.
  • Close older reset messages.
  • Complete the process without unnecessary delay.
  • Contact support if every new link fails.
Other sign-in methods

Review Google sign-in and passkeys

Google sign-in

Select the connected Google account and confirm it opens the existing Estavo account.

Passkey sign-in

Use a trusted device or password manager containing an existing Estavo passkey.

Password and passkey together

Changing a password does not necessarily remove existing passkeys.

Connected-account review

Review every sign-in method after suspicious account activity.

Security incident

Secure the account when a password may be compromised

  • Change or reset the password immediately.
  • Use a password not used on any other service.
  • End unfamiliar active sessions.
  • Review passkeys and remove unfamiliar entries.
  • Review connected Google sign-in.
  • Check the account email and profile details.
  • Secure the associated email account.
  • Review recent property, tenant, document and financial activity.
  • Contact Estavo support when unauthorised activity is suspected.
Secure the connected email account as well

Access to the email inbox can allow password-reset messages and account notices to be intercepted.

Device security

Manage passwords on shared or public devices

  • Do not save the password in a shared browser.
  • Sign out after use.
  • Close the browser when finished.
  • Remove downloaded reports and temporary files.
  • Review active sessions from a trusted device.
  • Change the password if it may have been stored or exposed.
  • Avoid completing sensitive account recovery on a public device.
Support review

Provide safe details when contacting support

  • Your account email.
  • Your name.
  • Whether you are changing or resetting the password.
  • Whether you can access the account email.
  • The sign-in methods normally used.
  • The approximate time the problem started.
  • Any non-sensitive error message.
  • Whether suspicious activity was observed.
Keep all credentials private

Do not send passwords, authentication codes, password-reset links or passkey information.

Troubleshooting

Common password problems

The current password is rejected

Check browser autofill and use password reset if the password is no longer known.

The new password is rejected

Review the displayed length and character requirements.

The passwords do not match

Re-enter the new password and confirmation carefully.

No reset email arrives

Check the account email, spam folder and other available sign-in methods.

The reset link is invalid

Request a new link and use only the newest message.

The old password still autofills

Update or remove the stored password in the browser or password manager.

Password reset does not recognise the email

Check whether the account email changed or whether Google sign-in created the account.

Access remains unavailable

Try a valid passkey or Google sign-in, then contact support without creating a duplicate account.

Your password access has been reviewed

The next guide explains how to set up and manage passkeys, use passwordless sign-in and remove passkeys associated with lost or unused devices.

Continue to passkeys