Client Portal password management

Your password is the key to your Berkeley Client Portal account. This guide covers how to choose a strong password, how often to change it, the situations in which you should change it straight away, and how to change it.

Choosing a strong password

Your Client Portal password must be at least 12 characters and include all four of the following:

an uppercase letter
a lowercase letter
a number
a symbol (for example ! @ # $ *)

We also recommend that you:

Use a password that is unique to your Berkeley portal account. Do not reuse a password from any other website or service.
Avoid reusing a password you have used on the portal before.
Use a password manager to generate and store a long, random password. This is the easiest way to keep a strong, unique password for every service you use.

How often to change your password

We recommend changing your Client Portal password at least every 90 days.

Regular changes limit how long an old or exposed password stays useful to someone else. If several people at your organisation have portal access, we recommend agreeing a shared reminder so changes do not get overlooked.

When to change your password immediately

Change your password right away — do not wait for your next scheduled change — if any of the following apply:

You think someone else knows your password, or has used your account.
You shared your password with anyone, or were asked to share it. (Berkeley will never ask you for your password.)
You entered your password on a device that is shared, public, or that you no longer control.
You have lost a device that was signed in to the portal.
You receive notice of unusual, unrecognised, or unexpected activity on your account.
Someone with portal access leaves your organisation or changes role. Change any password they may have known, and remove their access under Settings → Team.

How to change your password

Sign out if you are currently signed in, then go to the Client Portal sign-in page. The password reset pages are only available when you are signed out.
Select Forgot password.
Enter the email address you use for the portal.
Open the reset link emailed to you and set a new password that meets the requirements above.

If you do not receive the email, check your spam folder first, then contact [email protected].

Other ways to protect your account

Enable multi-factor authentication (MFA) if it is available for your organisation. MFA asks for a one-time code from an authenticator app in addition to your password, and it is the strongest single protection for your portal account. To enable it for your organisation, contact [email protected].
Give each person their own login. Do not share one account between colleagues — add each user under Settings → Team so access can be granted and removed individually.
Sign out when you finish, especially on a shared or public device.
Never send your password by email, chat, or text message, and never write it somewhere others can see.

Need help?

If you believe your account or password has been compromised, change your password immediately and contact [email protected].