Retire or rotate a password

Goal: stop one group’s access, or change a password that has been shared too widely.

To revoke access for one group

1. Go to Password Protected → Passwords.
2. Find the password by its label.
3. Either:
   • Delete it — permanent, or
   • Set Status to Inactive — reversible

Inactive is usually better. The rule stays visible so you remember it existed, and you can bring it back.

Anyone currently unlocked stays unlocked until their session expires. To cut them off immediately, see below.

To change a password

Because passwords are stored as hashes, you cannot edit one in place from the list. Instead:

1. Create a new password with the same scope and the new value.
2. Confirm it works in a private window.
3. Delete or deactivate the old one.

For the global password, use the Edit password button on the Settings screen.

To cut off existing sessions immediately

Changing a password does not log out visitors who already unlocked. To force everyone out:

1. Change the password as above.
2. Go to Settings → Stay unlocked for (days) and set it to 0 temporarily, then save.
3. Set it back to your normal value and save again.

New sessions use the new setting, and existing long-lived cookies stop being honoured.