How do I change or reset my password, and which sign-in methods exist?

Which sign-in methods can I use?

Three, and they all reach the same account as long as they use the same email address.

There is no email-verification step. A new account works the moment you finish signing up. Throwaway and disposable email domains are refused at signup, so use an address you can actually receive mail at — it is the only way back into the account.

How do I change my password while signed in?

1. Open your profile. Go to Settings → Profile in the dashboard.
2. Find Change Password. It is the second card on the page, under Account Information.
3. Fill in all three fields. Current Password, New Password and Confirm New Password. The new password needs at least 8 characters.
4. Click Update Password. The button confirms with Updating... while it saves.

How do I reset a password I have forgotten?

1. Go to the sign-in page and click Forgot password? next to the password field.
2. Enter your email and click Send reset link. The page answers the same way whether or not an account exists on that address, so double-check you typed the right one.
3. Open the email and click the link. It is valid for one hour and can only be used once.
4. Set a new password of at least 8 characters and sign in with it.

Resetting a password revokes every session that account has open, so you will be signed out on other devices and browsers. That makes the reset flow the right tool if you think someone else has your password.

Common problems

"This account was created with Google or Canva sign-in"

That account has no password yet, so the password box cannot work. Either use the button you originally signed up with, or run the Forgot password? flow once to set a password. After that both routes work.

The reset email never arrived

Check the spam folder first, then check you used the exact address on the account — the confirmation message is deliberately generic and does not tell you whether an account exists. If more than an hour has passed, the link is dead; request a fresh one.

"Your organization requires SSO login"

An administrator has switched on Enforce SSO for your email domain, which blocks password sign-in for everyone on it. Sign in with the Google button instead, or ask your administrator to review the settings described in the audit log and SSO article.

I want a second factor as well

Turn on two-factor authentication under Settings → Security. It applies to password sign-in and to the Google button.

Frequently asked questions