FAQ: Passwords & 2FA

How often should I change my password?

It's a good practice to change your password every 60–90 days, or immediately if you suspect your account has been compromised. Many organizations have password policies that require changes at regular intervals. Check with your administrator if your workplace has a specific policy.

What makes a strong password?

A strong password should be at least 8 characters long and include a mix of:

• Uppercase letters (A–Z)
• Lowercase letters (a–z)
• Numbers (0–9)
• Special characters (!, @, #, $, %, ^, &, *)

Avoid using common words, your name, or easily guessable information like birthdays or phone numbers.

If I lose my authenticator app or phone, can I still access my account?

Yes, if you saved your recovery codes when you set up 2FA. Recovery codes are designed for exactly this situation. Each code can be used once to log in. If you don't have recovery codes, contact your administrator or Usystems support to regain access.

Can I have 2FA enabled on multiple devices?

Yes. You can set up 2FA on more than one device (for example, your phone and a backup tablet) or use multiple verification methods (such as both an authenticator app and SMS). This is a good security practice and helps if you temporarily lose access to one device.

What should I do if I'm locked out of my account?

If you cannot log in, try:

1. Reset your password — use the Forgot Password link on the login page.
2. Use a recovery code — if you have a recovery code saved, you can use it to log in instead of your 2FA code.
3. Contact your administrator — if you are part of an organization, your admin may be able to reset your account.
4. Contact Usystems support — if the above steps do not work, reach out to the support team for help.

Is my password stored securely?

Yes. Usystems uses industry-standard encryption to protect your password. Passwords are never stored in plain text and cannot be read by Usystems staff. If you forget your password, Usystems will ask you to create a new one rather than sending you the old one.

Can I share my account with someone else?

No. Account sharing is not recommended and may violate your organization's security policy. Each user should have their own account and login credentials. If someone else needs access to the system, they should request their own account from your administrator.

What happens to 2FA if I change my phone number or authenticator app?

You should update your 2FA settings to use your new phone number or authenticator app. Log in to Settings → Account Settings, turn off 2FA, and then set it up again with your new device or contact information. Make sure to save your new recovery codes.