How to change my password

Updating your Air Maestro password helps protect your account and ensures your credentials meet current security requirements.

Password Policy Overview

Air Maestro includes a password policy designed to strengthen overall account security and prevent the use of weak or easily compromised passwords.
These requirements are informed by ongoing independent penetration tests.

A recurring outcome of these assessments is the need for robust password protection, which is why Air Maestro enforces strict complexity rules and limits password reuse.

To support this, all users must meet specific password requirements and avoid reusing recent passwords.

How to change my password

Follow these steps to update your password:

1. Go to Menu > My Profile > Change Password.
   
   
    

2. Enter your current password.
    

3. Enter your new password, ensuring it meets all listed requirements.
   
   

4. Re-enter the new password to confirm.
    

5. Click Change Password.

 

Password Recommendations

Meeting password requirements can be challenging, but choosing a secure password is important for account safety. 

Consider the following:

• Use a passphrase - a short sentence or a combination of four or more unrelated words

• Select something meaningful to you but not easily guessed by others

• Avoid writing passwords down or sharing them with colleagues

 

Using Single Sign-On (SSO)

Air Maestro supports Single Sign-On (SSO) as an alternative to traditional passwords. 

SSO allows users to authenticate using their organisation’s existing identity provider (e.g., Microsoft Azure AD, Google Workspace, Okta), rather than maintaining a separate Air Maestro password.

With SSO enabled:

• Authentication and password policies are managed by the organisation’s identity provider.

• Users access Air Maestro using their SSO credentials instead of an Air Maestro password.

• Each user’s SSO username is entered and maintained on their Personnel Wizard page in Air Maestro.

• User access can be granted or removed centrally through the organisation’s identity provider.

If you'd like to consider using SSO for your Air Maestro site, please contact [e-mail] for assistance.

FAQs

• How many previous passwords does Air Maestro remember?

Air Maestro remembers your last 8 passwords. Any older passwords can be reused.

• How long is the idle session timeout in the Classic Web App (CWA)?

The automatic timeout is 90 minutes of inactivity.

• How long is the idle session timeout in the Progressive Web App (PWA)?

Access tokens last 15 minutes, but they refresh automatically while the user is active.
Tokens expire after 18 hours, so users will need to log in again if they haven’t opened the PWA within that timeframe. 
This limit can be adjusted.

PWA uses a PIN code to protect against unauthorised access between complete logins.