Sessions and security

• Sessions last seven days and are protected against cross-site requests.
• Sensitive fields such as transaction notes and ticket messages are encrypted at rest.
• Every action inside an organization is checked against your role and permissions on every request.
• Sign out any time from the Account Center.
• Changing or resetting your password signs you out on every other device, and we email you that it changed.

Forgot your password

1. On the sign-in page choose Forgot password? and enter your email. (Signed in already? Use Email me a reset link in Account Center, Profile.)
2. Open the email and choose Choose a new password. The link works once and expires after 30 minutes.
3. Enter the new password twice. You are signed out everywhere and can sign in with the new password.

For your safety the page always says an email was sent, whether or not the address has an account, and reset links can be requested only a few times an hour. If no email arrives, check spam, and make sure it is the address you signed up with. Signed up with Google? You can also just continue with Google.

If you think someone else has access to your account, reset your password and contact support.