Set password · Prototype

[Product name]

Language

Checking your link…

Set your password

Welcome. Choose a password to activate your account.

Choose a new password

Saving it signs you out on every device.

Join Asuransi Demo · Surabaya

Budi Hartono invited you to Asuransi Demo · Surabaya as Surveyor. Set a password to accept.

Invited by other organisations too? Accept those after you sign in.

This link no longer works

A link works once, and only the newest one we sent. Ask for a new one.

Request a new link

Already set your password? Sign in to see your invitations

Back to sign in

The token is in the fragment, so it never reaches a server. The page sends Referrer-Policy: no-referrer.
POST /password/check {token} picks the heading from purpose: Activation (7 days), Reset (30 minutes) or an Invitation.
12 to 128 characters of any kind except spaces, paste allowed, a show/hide toggle, and a strength meter by length. No confirm-password field.
Rejected: a password with a space, one in the breached list, or one equal to the Person's email.
On success every session is revoked and the page goes to /login with a notice. Nobody is signed in automatically.

The no-spaces help line and error copy: written here, not settled anywhere yet.
The Saving state, with the spinner on the button: no source drew it.

No spaces: backend refuses a password with a space (a new error code), and web and mobile show the new help line and "Your password can't contain spaces." on Reset, Activation, Invitation and Security.
After an Invitation: go to Sign in's "Joined" state, not the plain "Password set".

The field is "New password" with its help line on Reset, Activation and Invitation. (11 Oct 2026)
Passwords have no spaces. This reverses "any characters, spaces too" from sign-in-and-sessions. (11 Oct 2026)
Link invalid keeps the older text, "Request a new link", "Already set your password?…" and "Back to sign in", for every kind of link. (11 Oct 2026)
After an Invitation, Sign in says "Your password is set / You've joined Asuransi Demo. Sign in to start." with the email filled in. (11 Oct 2026)
The strength meter, Too short and Same as the email are the design as built. (11 Oct 2026)

From sign-in-and-sessions.html, chinese-languages.html, memberships-and-switcher.html