Passwords and security
How to change or reset your password, what happens after failed sign-ins, and the session and password rules admins can set
On this page
This article covers keeping your TurfWise account secure: changing your password, getting back in if you forget it, and the session and password rules an admin can set for the whole club.
The first half is for everyone. The Security policy section is for club admins.
What makes a good TurfWise password?
Every password needs at least 12 characters, including:
- an uppercase letter
- a lowercase letter
- a number
- a special character, such as ! or #
The password pages tick each rule off as you type, so you'll know straight away if something's missing.
Use a password manager
A password manager can create and remember a strong password for you. It's the easiest way to meet all five rules without writing anything down.
How do I change my password?
Open Change password
Click your initial in the top bar, choose Settings, and in the Account & security group click Change password.
Enter your passwords
Type your Current Password, then your New Password, and the new one again in Confirm Password.
Save
Click Change Password. You'll see Password Changed, and after a couple of seconds TurfWise signs you out so you can sign in again with your new password.
Changing your password signs you out everywhere you were signed in, including other computers and browsers. That's deliberate: anyone using an old session has to sign in again with the new password.
If your manager set you up with a temporary password, TurfWise asks you to create your own the first time you sign in, on a page headed Create Your Password. Usually you won't need your old password for that step. If your account is also linked to the TurfWise mobile app, you'll be asked to enter the password you signed in with too, then press Change Password again.
I've forgotten my password. What now?
Click Forgot password?
It's under the password box on the login page.
Enter your email
Type the email you log in with and click Send me a link.
Use the link quickly
The reset link expires in 60 minutes. Open it, choose a new password and click Reset password.
Link expired? The page will tell you, and you can request a new one from there.
Staff: your manager can reset it too
If you use the phone app and have lost your password, your manager can set a new one for you from your staff record, under Phone login & access. See Adding your team.
Why was I locked out?
After five wrong passwords in a row, TurfWise locks the account for 15 minutes. This stops anyone guessing their way in. Wait for the 15 minutes to pass, then try again, or reset your password.
TurfWise also signs you out automatically after a period with no activity. Unless your admin has changed it, that's 48 hours.
How do I sign out?
Click the round button with your initial in the top-right corner, then click Sign Out. It's worth doing on a shared office computer.
What can admins set in Security policy?
Club admins can set security rules that apply to everyone at the club. Click your initial in the top bar, choose Settings, and under Account & security click Security policy. The page is headed Security Settings.
Make your changes, then click Save Security Settings at the bottom. You'll see "Security settings saved successfully".
Session Timeout
Sets how long someone can be inactive before TurfWise signs them out. Enter a number of minutes, from 5 up to 2880 (48 hours). Shorter is safer on shared computers, but longer is kinder to a busy head greenkeeper who leaves a tab open all day.
Password Policy
Switch on Enforce strong password requirements to set your own rules: a Minimum length, and whether passwords must include special characters, numbers, uppercase letters and lowercase letters. These rules apply on top of the standard ones above.
Does TurfWise have two-factor sign-in or an IP whitelist?
Not at the moment. Earlier versions of the Security policy page had switches for both, but neither could be used safely, so they've been removed. Signing in uses your email and password, protected by the lockout after five wrong attempts.
If your club needs two-factor sign-in, email paul@turfwise.co.uk so we know it's wanted.
Common problems and fixes
My reset email hasn't arrived
Check your spam or junk folder, and make sure you typed the email you actually log in with. Request a new link if it's been more than an hour.
"You do not have permission to view security settings"
Security policy is for club admins only.
Everyone was signed out sooner than expected
Check the Session Timeout in Security policy. It counts minutes of inactivity, so a low number signs people out quickly.