Your CRM holds some of the most valuable information in your agency: vendor details, buyer enquiries, commission figures and trust records. Keeping that information safe starts with the simplest thing of all, the login. We’ve just rolled out a set of account security improvements across iDashboard, and this article walks through what’s changed and how your team can make the most of it.
What’s new
- Self-service forgotten password. If a user forgets their password, they can now reset it themselves from the login page. Our support team will no longer be able to reset your password on your behalf.
- Password reset emails for super users. Agency super users can send a password reset email to a team member, so access can be restored quickly without anyone sharing passwords.
- New minimum password requirements. We’ve increased the password requirements for all users, which makes accounts much harder to guess or brute-force.
- New minimum login length. We’ve increased the minimum login length, so usernames must now be at least five characters long for all users.
- Login activity recording. iDashboard now records login activity, creating a clearer trail of account access.
- Identity verification for phone support. When you call our support team about your account, we’ll take you through a short verification step to confirm who you are before making changes.
Why it matters for agencies
Real estate businesses are an attractive target for scammers because so much money and personal data moves through them. Many account compromises don’t involve sophisticated hacking at all; they rely on weak passwords, shared logins, or someone convincing a helpdesk to reset an account. These changes close off several of those common gaps, while also saving your team time when they genuinely need access restored.
A few good habits to pair with the update
- Give every team member their own login. iDashboard includes unlimited users, so there’s no reason to share accounts. Individual logins keep permissions and activity clear.
- Use the self-service reset rather than sharing passwords. If someone is locked out, point them to the forgotten password link on the login page, or have a super user send a reset email.
- Remove departing staff promptly. Make deleting a former employee part of your offboarding checklist, alongside reassigning their listings and contacts.
- Choose strong, unique passwords. Avoid reusing a password from another service, and consider a password manager for the team.
- Expect to be verified when you call. The verification step on phone support requests is there to protect you. Anyone asking for account access in an unexpected email or call should be treated with caution.
Do I need to do anything?
For most users, nothing changes day to day. If your current password doesn’t meet the new minimum requirements, you may be asked to update it. If you have any questions or need a hand, our support team is here to help on 1800 432 742.
Account security is an ongoing commitment, and these improvements are one part of keeping your agency’s data, and your clients’ trust, well protected.
