Resetting a forgotten password

If you cannot remember your password, you can set a new one from your email inbox. You do not need support to do it, and support cannot do it for you.

  1. On the sign-in page, click Forgot password?
  2. On Forgot Password, enter the email address on your account. The screen says Enter your email address and we’ll send you a link to reset your password.
  3. Click Request Password Reset.

You will see If an account exists with this email, a reset link will be sent.

That wording is deliberate. Finthy answers identically whether or not an account exists at that address, so nobody can use the reset form to find out who has a Finthy account. The message is not a confirmation that we found you. If you are not sure which address you used, try the other one rather than reading anything into the reply.

Setting the new password

The email comes from [email protected] with a link. Opening it takes you to Reset Password, where you enter New password and Confirm password and click Reset Password. You will see Password has been reset successfully and can sign in.

Three things to know about the link:

  • It expires one hour after you ask for it. After that it stops working and you need a new one.
  • It works once. Once a new password is set, the link is spent.
  • Only the newest link works. Asking for a reset twice invalidates the first email. If you have several reset emails in your inbox, use the most recent one.

A password reset must still be at least 8 characters. See Your password for the full rules.

What a completed reset does

  • Every session is signed out. Your phone, other browsers and other computers all have to sign in again with the new password. That is what makes a reset useful if you think someone else got in.
  • A sign-in lock is lifted. Proving you can read the inbox clears any lock from repeated wrong passwords, so you do not have to wait it out.
  • Two-factor authentication stays on. A reset changes the password, nothing else. If you have 2FA enabled you will still be asked for a code after signing in with the new password, and if you have lost your authenticator app a reset will not get you past it. See Setting up two-factor authentication (2FA).
  • Nothing else changes. Your banks, transactions, budgets and plan are untouched.

A reset does not send a confirmation email the way a password change from Settings does. The success screen is the confirmation.

The email has not arrived

  • Check spam and junk. The sender is [email protected]. Allowing that address stops it happening again.
  • Check the address. A typo gets the same reassuring message as a correct address, and no email. Try the other address you might have used.
  • Check which address is current. If you changed your email recently, the link goes to the address on the account now, not the old one.
  • Wait a minute, then ask once more. Remember that the newest email is the one that works.
  • Still nothing? Write to support from the address you are trying to reset. Mail being rejected or filtered at your provider is the usual cause, and that is something we can look into with you.

“Too many attempts. Please try again later.”

That message means password sign-in is locked on the account. It appears after 10 wrong passwords within 15 minutes of the first wrong one, and the lock lifts at the end of that same 15-minute window, so the wait is always under a quarter of an hour.

You do not have to wait. Completing a password reset lifts the lock straight away.

Two details worth knowing. A correct password clears the counter, so nine wrong tries followed by a correct one leaves nothing behind. And the same message appears for addresses that have no Finthy account at all, again so that the response cannot be used to work out who is a customer.

If you have a passkey

You can skip all of this. A passkey signs you in without a password, so a forgotten password is not something you need to fix before you can get in. Sign in with the passkey, then change the password from Settings > Security at your leisure.