Customer accounts

Your customers sign up on your store with an email and password (or Google), confirm their email, and sign in. This page covers what they can do on their own, so you don’t have to.

Forgotten passwords

A customer who forgot their password presses Forgot your password? on the sign-in page and enters their email. If there’s an account with that email, they get a link to choose a new password.

• The link is for your store. It always points at your store’s own address, never at whatever address the request came from, so it can’t be redirected elsewhere.
• One use, one hour. The link works once and expires after an hour. An old or used link asks them to request a new one.
• Nothing is revealed. The page shows the same message whether or not an account exists, so it can’t be used to find out who your customers are. A few requests an hour per account are sent; more are ignored, so it can’t flood an inbox.
• Signed out everywhere. Choosing a new password signs the account out on every other device and lifts a lockout from too many wrong passwords.
• 2FA still applies. If the account uses two-factor authentication (business owners always do), the code is still required at the next sign-in.

Accounts that only sign in with Google have no password to reset; they keep using Sign in with Google.

Email delivery

Password reset and email confirmation links are sent by email. Until email sending is set up for your store, those emails are queued but not delivered.