The Account Security module lets users manage their login credentials and configure additional sign-in safeguards. Good account habits are essential for maintaining the integrity of your community's data.
Changing Your Password
Every user can change their password from the Account Security page:
1. Enter your current password (if required) and choose a strong new password. Horizon enforces minimum complexity requirements, typically a mix of upper and lower case letters, numbers and special characters. 2. Re-enter the new password to confirm. 3. Save the changes. You will receive confirmation when the update is successful.
If you forget your password, use the Forgot Password link on the login page to reset it. A reset link will be sent to your registered email address. For security, reset links expire after a short period.
Multi-Factor Authentication (MFA)
Depending on your community's configuration, Horizon may support multi-factor authentication. If enabled, you can:
- Set up an authenticator: Scan a QR code with an authenticator app (e.g., Google Authenticator, Authy) to pair it with your account.
- Receive one-time codes: After pairing, you will need to enter a time-based code generated by the authenticator each time you log in. Even if someone learns your password, they cannot sign in without the current code.
Follow the on-screen instructions to enable or disable MFA. If you change phones, disable MFA first, then re-enroll with your new device.
Best Practices
- Use unique passwords: Avoid using the same password on multiple sites. A password manager can help you generate and store complex passwords securely.
- Change passwords periodically: Update your password at least once a year or whenever you suspect it may have been compromised.
- Enable MFA when available: Adding a second factor greatly reduces the risk of unauthorized access to your account.
- Do not share credentials: Each user should have their own account. Sharing passwords makes it difficult to audit actions and increases the risk of misuse.
- Pro tip! Use social sign-on to reduce the number of credentials you need to remember. JEKA Software supports social sign-on from identity providers including Google and Facebook; the options offered on your community's site may vary with its configuration. Only your email address is shared when using this method. See What Is Social Sign-On and How Do I Use It in Horizon? for a walkthrough.
By following these practices and using the tools provided in the Account Security module, users help maintain the integrity of their own accounts and of the community's data.