Skip to content

Signing in, passwords and sessions

Passwords

Your password must be at least 12 characters long. Iris also checks that it hasn't appeared in a known data breach, using the Have I Been Pwned service. Only the first five characters of a one-way hash of your password are sent, never the password itself.

A long phrase of a few unrelated words is easier to remember and harder to guess than a short password with symbols.

To change your password, go to Settings → Security. If you've forgotten it, choose Forgot password? on the sign-in page.

Staying signed in

  • If you're inactive for 2 hours, you're signed out.
  • If you tick Remember me when signing in, you stay signed in on that browser for up to 30 days. Only use it on a device you don't share.

Agreeing to updated terms

When the End User License Agreement or Privacy Policy change, Iris asks you to read and accept the new version the next time you use it. Iris records which version you accepted and when.

Email from Iris

Iris only sends service emails: email verification, invitations, password resets, alerts about your stores and QuickBooks connections, and billing. It doesn't send marketing email.