Forgot password does more than reset: it also confirms your email and clears a lockout, so it's the fastest fix for most sign-in problems.
Forgotten your password
On the sign-in page, enter your email, select Continue, then select Forgot password?
Your email is carried across. The page is headed Reset your password and accepts your email or username; for almost everyone the username is the email.
Select Send reset link
The page always says a link is on its way if an account exists, whether or not one does, so a wrong address isn't pointed out. The email is titled ClinyPal: Password reset request.
Select Reset my password in the email, within 1 hour
The page Choose a new password asks for the new password twice. It must be 8 to 32 characters with an uppercase letter, a lowercase letter, a number and a special character.
Select Save new password
You're returned to the sign-in page with Your password has been reset — log in with your new password.
A link that's older than an hour, or has already been used, shows This reset link is invalid or has expired. Request a new one. If the email doesn't arrive, check the junk folder and that the address is the one on your user; an administrator can check it under Users & Practitioners and correct it. A temporarily locked account can still request a reset, and signing in with the new password clears the lock.
Signed up with Google or Microsoft and have no password
The same reset link sets a password on an account that never had one. Use it before disconnecting your Google or Microsoft account, or if you need to sign in somewhere that account isn't available. Until you do, the password step on the sign-in page answers Invalid username or password. for your email, because there's no password to match.
Change your password while signed in
Open Settings, then Users & Practitioners, open your own user and select Change next to Password under Security. Enter the new password twice and save. You're asked to confirm your current password first, with the note Enter your current password to set a new one; see Why you're asked to confirm your password again. The same password rule applies.
An administrator can also set a new password for someone else from that person's user page, after passing the Confirm it's you check with their own password or a passkey. It signs that person out of ClinyPal everywhere, but it doesn't block their access, so deactivate the user if the point is to keep them out. Nobody but the main owner can change the main owner's password. For a user who never set a password, resending the invitation is usually better, because they choose their own from the link.