The question this page answers

I followed the link in the email; can I set a new password now and get back in? This page is reached from the recovery email only. The signed-in change of password lives in Settings under Profile, in its Sign-in set, and is not this page.

What you see

Set a new password, from a whole link, marked 1.

1. 1Save new password writes the new password and signs you out everywhere else.

The title is

Set a new password

and, when the link is whole, one sentence about the write's real consequence:

Saving a new password signs you out everywhere else.

Two fields, New password and Confirm new password, with the rule as the first field's own placeholder and Type it again as the second's; one Show or Hide reveals both, so a mismatch is visible without a second press. Save new password is disabled until both pass and match; a failing rule prints its sentence under its own field. One mismatch sentence, the same one Settings uses, appears under the second field when they differ. On success the form leaves and the sentence reads

Your password is set, and every other session of yours has been signed out.

with one door, Sign in.

What to do

1. Type the new password in New password.
2. Type it again in Confirm new password; press Show or Hide to check both at once.
3. Press Save new password; Enter does the same.
4. Press Sign in on the confirmation and sign in with the new password.

Saving also lifts a lock from too many wrong passwords. The link is single use and lasts a day, and several links can be live at once; a used one reads as expired.

When it is empty or failed

A link missing either of its two parts is decided on arrival, not at the press:

This link is incomplete; request a new one.

with the doors Request a new link and Back to sign in and no form. A refusal replaces the form with the server's own sentence:

That password reset link has expired. Ask for a new one; each link lasts a day.

The provided token is not a valid token.

each with the same two doors. Any other refusal replaces the form with the server's sentence, such as

This account signs in with Google or Microsoft; set its password with that provider.

for an account whose password lives with its provider, and a failure that served no sentence reads

The password was not changed; request a new link and try again.

Either carries Request a new link, Back to sign in and the support address, support@tightly.io. Request a new link opens Forgot password.