In general the user and account handling has been moved away from the RapidiOnline home page and into the RapidiOnline service area. In this way, you will have easy access to user and account settings via links in the top of the window as long as you are logged in in the service area.

Below is a list of the improvements and changes:

• you now have a settings menu where you can edit your user information, change password and change email.
• account administrators now have an account menu where they can view account information, associate users, invite new users and change password policies
• change email has been redesigned to be more secure: When you want to change your email address, we will email a link to the old email address and ask you to confirm the email address change. This ensures that nobody can steel an account by using a logged in session to change the email address (and maybe later use the forgot password facility to get a new password).
• we now let you select a password question (password hint) and enter the corresponding answer in the change password window.
• the forgot password functionality has been redesigned so that we now send you an email with a link. When you click on the link, you can enter the answer to your password hint question and then you can set a new password. Existing users should take a moment to change their password and establish a password question/answer so that they can use the forgot password feature if needed later.
• account administrators (the first user that sign up from a company) now have an additional way to associate other users with the company account (and thereby giving them access to their RapidiOnline service(s)). Now they can invite a new user to signup on RapidiOnline; The new user will get an email with a link and after entering the normal signup information, he/she will automatically be associated with the account and have access to the service(s). This should make it easier to add new users to the same account.
• account administrators can now also edit password policies for the account. You can set when passwords should expire (30 days, 60 days, 90 days etc) and also if users can reuse old passwords (prohibit reuese of last 3 or 5 used passwords). Existing accounts do not enforce password expire or prohibit password reuse until the administrator sets this up !
• furthermore we now check how many failed login attempt a user has done, and if a user has more than 5 failed login attempts, he/she is locked out from the service for 15 minutes.
• passwords must be at least 8 characters long and contain both letters and numbers (this was also the case before).
• you will also automatically be logged out of RapidiOnline after a certain time of inactivity (this was also the case before - not changed).
• and we fixed an error that was actually quite annoying: when using a direct link into the service - like for example https://www.rapidionline.com/service/xx (where xx is the number of your service), you would be redirected to the login page (if you were not already logged in). After logging in, you were not redirected back to the service, but to the service list. This now been fixed so that you are redirected back correctly to the initial url. Sorry for taking so long to get this fixed !
• finally we have made quite a number of text changes to make explanations better and easier to understand.
• and we added a couple of handy links in the bottom to the self-service portal.

As always, feedback is very welcome !

Thanks

Michael