Choose a new MedPros password

After you click the button inside your "Reset your MedPros password" email, you land on a secure page with two fields: a new password and a confirmation of the same password.

• The URL contains a signed token tied to your account and your email. Only the MedPros application can read it — nobody can guess or replay it.
• As soon as you save a new password, the token is burned. You cannot use the same link a second time; you will just see an "invalid or expired" message.
• The page is served over HTTPS. If your browser warns about the certificate, do not continue — close the tab and try again on a trusted network.

1. Make sure the email at the top of the form is yours. If it is blank or wrong, something has gone wrong with the link — request a new reset.
2. Type your new password once. The strength indicator updates live — aim for the "Strong" band.
3. Type the same password in the "Confirm password" field. A green tick appears when both match.
4. Press "Save new password". You will see a success screen and a button to sign in with the fresh password.
5. Sign in to confirm the change. On your very next sign‑in you may be asked to approve the device again — that is the normal security pattern.

We keep the rules short so they are easy to follow:

• At least 8 characters. 12+ is comfortably strong, especially if you use a pass‑phrase.
• A mix of letters, numbers and at least one symbol makes life much harder for attackers.
• Avoid obvious patterns such as your name, your city, your roll number, your date of birth or "Password1".
• Do not reuse a password from another site. If any of those sites is ever breached, attackers try the same password on every service they can find.
• If a password manager offers to generate and save the new password, say yes — remembering it is no longer your problem.

A few harmless things cause this, and the fix is always the same: request a new reset.

• You waited more than about an hour after the email was sent. Links expire to limit how long a stolen email could still hurt you.
• You clicked the link, then clicked the same link again. The first click uses it up.
• You requested a second reset before finishing the first. The newer request wins and the older link becomes invalid.
• You copy‑pasted the URL and the email client broke the line in the middle. Click the button inside the email instead of pasting.

Start again from /v2/forgot-password — a new link takes about two minutes to arrive.

Finishing the reset changes a few things on purpose:

• You are signed out on your other devices so any unauthorised session is cut off. This is a security feature, not a bug.
• Your enrolments, quiz attempts, scores and purchase history are untouched. You only have a new sign‑in credential.
• If you had a sign‑in with Google/Facebook on the same account, you can still use those providers — the new password just adds another way in.
• If anything on the account looks off (missing courses, unknown device, unexpected emails), contact support within 24 hours so we can review recent activity.

Q: Can I reuse my old MedPros password? A: Please do not. If the reason you are resetting is that someone might have it, reusing it defeats the whole exercise. Pick something fresh.

Q: Does the reset page work on mobile? A: Yes — the form is mobile‑first. On a phone, tap the eye icon so you can see what you are typing; small on‑screen keyboards cause most typos.

Q: Why is the email address greyed out on the form? A: We show the email so you know which account you are resetting, but it cannot be changed from this page — the token is tied to that specific address.

Q: Can I reset the password for my friend or family member from my device? A: Only if they are sitting next to you with their own inbox open. The link must be opened by the account owner and they must type the new password themselves.

Q: How often should I change my password? A: You do not need a calendar for this. Change it if you think somebody else knows it, or if a site you reused it on was part of a known breach. Otherwise, a good password you remember is better than a weak one you rotate often.