Your Finthy password is set when you create your account and can be changed at any time from Settings. This article covers what makes a password acceptable, how to change it, and what changing it does to the devices you are already signed in on.
The only rule is length
A Finthy password must be at least 8 characters. That is the only requirement, and it is the only line the form lists under Password requirements:.
While you type, a coloured bar rates the password Weak, Medium or Strong. That
bar is advice, not a gate. It turns green when the password also has an uppercase letter, a
lowercase letter, a number and one of @ $ ! % * ? & #, but a password without any of
those is still accepted if it is long enough. A long passphrase of ordinary words will be
rated lower than a short password full of symbols and is usually the better choice anyway.
Two things Finthy does not do: it does not expire your password on a schedule, and it does not check it against lists of leaked passwords. Reusing a password from another site is the risk no length rule can catch, so use one you have not used elsewhere, and a password manager if you have one.
Changing it
- Open Settings from the main menu.
- Go to the Security tab.
- Find Change password.
- Fill in Current password, New password and Confirm password.
- Click Change password.
You will see Password changed successfully when it is done.
Three errors can stop you:
- Current password is incorrect. The password in the first field is not your current one. If you cannot remember it, reset it instead; see Resetting a forgotten password.
- New password must be different from current password. Finthy will not let you set the password you are already using.
- Password must be at least 8 characters. The new password is too short.
What a password change does
Changing your password signs out every other session. If you were signed in on your phone, on another browser or on a second computer, all of those are signed out and will ask for the new password. The window you changed it in stays signed in, so you are not kicked out of the tab you are working in.
You also get an email telling you the password was changed. If that email arrives and it was not you, change the password again immediately from a device you trust and write to support.
What a password change does not do: it does not disconnect your banks, delete anything, change your plan, or turn off two-factor authentication. Your data is exactly as it was.
Finthy cannot read your password
Finthy stores a one-way hash of your password, never the password itself. Nobody at Finthy can look it up, read it back to you, or type it in for you, and support will never ask you for it. Anyone who does ask is not us.
The same is true of the reset links we email: the database holds only a hash of the link’s token, so a copy of the database cannot be turned into a way into your account.
If you would rather not use a password
Add a passkey. A passkey signs you in with your device unlock, your fingerprint, your face or a hardware security key, and there is no password to type, reuse or have phished. It lives in Settings > Security > Passkeys. See Setting up two-factor authentication (2FA) for how passkeys and two-factor authentication relate, because they are not the same thing.
Your password stays on the account when you add a passkey. Passkeys are available in the web app today; the native app is on our roadmap.