ParcelPilot
Help

Users — Passwords & Password Resets

Use this guide when a user needs to set or change their ParcelPilot password.

What administrators can and cannot do

Administrators cannot see a user's password, set a user's password from the user record, or generate a password for them.

Authorised administrators can send a secure password-reset link from a user's View or Edit page. The reset email is sent to the user's registered email address, and the user chooses their own new password.

Send a reset link for a user

  1. Go to Administration → Users.
  2. Open the user.
  3. Click Send Password Reset from the user's View or Edit page.
  4. Confirm the action.

ParcelPilot emails the reset link to the address saved on that user account. The link is valid for 4 hours.

Requesting a newer reset link invalidates the previous reset token, so the user should use the latest email they received.

User self-service reset

Users can reset their own password from the login page by choosing Forgot password? and entering their registered email address.

The reset email uses the same secure password-reset flow. The user chooses their own new password; ParcelPilot does not reveal the old password.

If a reset link expires

If the link is older than 4 hours, ask the user to use Forgot password? again or send a new Send Password Reset email from their user record.

If multiple reset emails were requested, use the newest email because newer reset links invalidate older ones.

Permissions and scope

The action follows the same tenant, client, and role restrictions as editing a user:

  • Platform admins can send reset links for users they can edit.
  • Tenant owners and admins are limited by their tenant scope and cannot manage platform admin accounts outside their authority.
  • Client-user managers can only manage client-user accounts in their own client scope.
  • Users can send a reset link for their own profile from My Profile.

If the action is missing, check the current user's role, tenant/client scope, and whether they can edit that user record.

Related