> ## Documentation Index
> Fetch the complete documentation index at: https://buttercms.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Password authentication

> Learn about ButterCMS password requirements, account security features, and how to reset your password.

ButterCMS uses email and password as the standard authentication method for all accounts. Strong password policies are enforced automatically, and you can reset your password at any time via email.

## Password requirements

ButterCMS enforces strong password policies:

* **Minimum length** - Passwords must meet minimum length requirements
* **Complexity** - A mix of characters is recommended
* **No common passwords** - Common passwords are rejected
* **Secure storage** - Passwords are hashed and never stored in plain text

<Tip>
  Use a password manager to generate and store strong, unique passwords for your ButterCMS account.
</Tip>

## Account security features

| Feature                    | Description                                                 |
| -------------------------- | ----------------------------------------------------------- |
| **Password reset**         | Secure email-based password recovery                        |
| **Session management**     | Automatic session timeout for inactive users                |
| **Brute force protection** | Rate limiting prevents password guessing                    |
| **HTTPS only**             | Credentials are only transmitted over encrypted connections |

<Check>
  For a deeper look at session security, brute force protection, and other platform-level security controls, see the [Security overview](../../build-your-app/security-compliance/security-overview).
</Check>

## Resetting your password

If you have forgotten your password or need to reset it:

<Info>
  If you're currently logged in, sign out first before using the password reset link.
</Info>

1. Go to [buttercms.com/password\_reset/](https://buttercms.com/password_reset/)
2. Enter your account email address
3. Check your inbox for a reset link
4. Follow the link to set a new password

<Warning>
  Password reset links expire after 24 hours. If your link has expired, request a new one.
</Warning>

<Info>
  If your organization uses SSO, password resets are handled through your identity provider — not through ButterCMS. Contact your IT administrator for assistance.
</Info>