Documentation
Invitations and passwords
Accept an invitation to DeviceQuest, choose a password, and reset a forgotten password with a reset link.
Overview
DeviceQuest accounts are created by invitation. An administrator invites you by email from Admin → Users, and you open the link to choose your name and password. If you later forget your password, an administrator sends you a one-time reset link. The pages described here open for anyone with a valid link, without signing in.
Accept an invitation
Your invitation email contains a link of the form https://<your-devicequest-host>/accept-invite/<token>. The link is valid for 7 days.
- Join organisation: the organisation you’re joining. Below it, DeviceQuest shows the role you’re invited as and the email address the invitation was sent to. That email becomes your sign-in email.
- Your name: the name other people see in DeviceQuest, for example on assignments and comments.
- Password: the password you’ll sign in with.
- Password checklist: each rule turns green with a ✓ as soon as your password meets it.
- Confirm password: type the password again.
- Accept invitation: creates your account. While it works, the button reads Setting up your account….
- Open the link in your invitation email.
- Check the organisation, role and email shown at the top.
- In Your name, type your name.
- In Password, type a new password. Watch the checklist until every rule shows ✓:
- At least 12 characters
- One uppercase letter
- One lowercase letter
- One number
- One special character
- In Confirm password, type the same password again.
- Click Accept invitation.
- Account created appears: Your account is ready. Sign in to continue and complete MFA setup if your role requires it. Click Continue to sign in.
- Sign in with your email and new password. If your role requires MFA, DeviceQuest walks you through setting it up.
Invitation messages
| Message | Meaning | What to do |
|---|---|---|
| Invitation not found: This invitation link is invalid. | The link is incomplete or mistyped. | Copy the full link from the email, or ask your administrator to send a new one. |
| Invitation no longer valid: This invitation has expired or has already been used. | More than 7 days have passed, the invitation was already accepted, or an administrator revoked it. | Ask your administrator to send a new invitation. |
| Something went wrong: We couldn’t validate this invitation right now. | DeviceQuest couldn’t check the invitation. | Try again later. |
| Password does not meet all requirements. | A checklist rule is still open. | Adjust the password until every rule shows ✓. |
| Passwords don’t match. | Password and Confirm password differ. | Type the same password in both fields. |
| This invitation is no longer valid. Ask your administrator to send a new one. | The invitation expired or was revoked while the page was open. | Ask your administrator for a new invitation. |
Reset a forgotten password
Password resets are administrator-initiated: your administrator sends you a secure, one-time reset link, so every reset is approved by your organisation.
- Back to sign in: returns to the sign-in page.
- On the sign-in page, click Forgot password?. The Forgot password page explains the process: Reset links expire after 24 hours and can only be used once.
- Ask your administrator to send you a reset link. They open your user record under Admin → Users, click Send password reset, and confirm with Send reset email.
- Open the link in the email. It has the form
https://<your-devicequest-host>/reset-password?token=<token>and is valid for 24 hours, once. - On Set a new password, type your new password in New password. The checklist below the field shows each rule turning green as you meet it: At least 12 characters, One uppercase letter, One lowercase letter, One number, One special character.
- Type it again in Confirm password.
- Click Reset password. The button reads Resetting… while it works.
- Your password was reset. You can sign in now. appears. Click Continue to sign in.
- New password: your new password.
- Password checklist: each rule turns green as your password meets it.
- Confirm password: the same password again.
- Reset password: saves the new password.
When the reset completes, DeviceQuest signs your account out everywhere it was signed in, and the link stops working. Your MFA settings stay as they were.
Reset messages
| Message | Meaning | What to do |
|---|---|---|
| This reset link is missing its token. Ask your administrator to send you a new one. | The link was cut off. | Copy the full link from the email, or ask for a new one. |
| Password does not meet all requirements. | A checklist rule is still open. | Adjust the password. |
| Passwords do not match. | The two fields differ. | Type the same password in both fields. |
| reset link is invalid or expired | The link is older than 24 hours or was already used. | Ask your administrator for a new link. |
| password reset failed | DeviceQuest had an internal error. | Try again in a moment. |
| Unable to reset password. Please try again. | Your browser couldn’t reach DeviceQuest. | Check your connection and try again. |
Back to sign in under the form returns you to the sign-in page at any time.
Password policy
The same rules apply everywhere you choose a password: at first-run setup, when you accept an invitation, and when you reset your password.
| Rule | Characters that count |
|---|---|
| At least 12 characters | |
| One uppercase letter | A–Z |
| One lowercase letter | a–z |
| One number | 0–9 |
| One special character | any printable symbol, such as ! # $ % - _ . |
Related pages
- Signing in
- Multi-factor authentication
- First-run setup
- Users and invitations (Administration section): invite users, resend or revoke invitations, and send password-reset links.