Password Policy

What NODRO requires

• A password must be between 8 and 128 characters long.
• Each person has their own account. Please do not share one login between several people: the activity log is only useful if it shows who did what.

What we recommend

• Use a long password or a few unrelated words. Longer is stronger than clever.
• Use a password you do not use on any other website or app, so that a leak elsewhere does not open your NODRO account.
• Do not use your phone number, your business name or your name.
• Use a password manager if you can, or write the password somewhere safe at home, not on the equipment or the office wall.

How we protect passwords

We never store a password as you typed it. We store a scrambled (hashed) version, so nobody at NODRO can read or tell you your password. Sign-in attempts are limited, which makes guessing slow.

Two-factor sign-in

Two-factor sign-in asks for a code from an app on your phone as well as your password. It is available to everyone, and we recommend it for owners and administrators. It is required for NODRO staff. You can turn it on in Your account.

Staying signed in

You stay signed in on a device for up to 30 days, renewed each day you use NODRO, or until you sign out. In Your account you can see where you are signed in and sign out other devices. If you share or lose a phone, sign it out.

Forgotten passwords

A team member who forgets their password asks their business’s owner or an administrator to set a new one. An owner who is locked out contacts us, and we confirm it is really them before we help. See our Support Policy.

If your password may have leaked

1. Change it now, in Your account, or ask your administrator to reset it.
2. Sign out your other devices.
3. Change it anywhere else you used the same password.
4. Tell us, so we can look for anything unusual. We never ask you for your password; if someone claims to be NODRO and asks for it, do not reply.