Stay in Full Control of Who Can Access Your Account
Your QuickEstimate account contains sensitive business data — client details, pricing, and financial records. Keeping your password strong and your active sessions in check means you always know exactly which devices have access and can cut off any that shouldn't.
This guide covers everything in one place: updating your password, resetting it if forgotten, reviewing every active login session, and revoking access from old or unrecognised devices — all from your Security Settings.
How to Manage Your Account Access
Work through these steps to audit and tighten access to your QuickEstimate account. Each section can be completed independently depending on what you need to do.
Open Security Settings
Your password controls and active session manager are both located in the Security tab of your account settings — everything in one place.
- Click your profile avatar or account name in the top navigation bar
- Select Account Settings from the dropdown menu
- Navigate to the Security tab in the left sidebar
- You'll see three sections: Password, Active Sessions, and Two-Factor Authentication
Update Your Password
Changing your password regularly — and immediately after any suspected security incident — is one of the simplest ways to keep your account locked down.
- Under the Password section, click Change Password
- Enter your Current Password to confirm your identity
- Type your New Password — see the strength requirements below
- Re-enter your new password in the Confirm New Password field
- Click Save New Password to apply the change immediately
- You'll receive a confirmation email to your account address — if you didn't request this, contact support immediately
Reset a Forgotten Password
If you can't log in because you've forgotten your password, you can reset it securely from the login page without contacting support.
- Go to the QuickEstimate login page at app.quickestimate.io/login
- Click Forgot your password? below the login form
- Enter the email address associated with your account and click Send Reset Link
- Check your inbox — a password reset email will arrive within 60 seconds
- Click the link in the email — it opens a secure reset form valid for 60 minutes
- Enter and confirm your new password, then click Reset Password
- You'll be automatically logged in once the reset is complete
Didn't receive the email? Check your spam or junk folder, and ensure you're using the correct email address. If the issue persists, contact QuickEstimate support.
Review Your Active Sessions
Active sessions show every device currently logged in to your QuickEstimate account — including device type, browser, approximate location, and when the session was last active.
- Under Active Sessions, you'll see a list of all current logins
- Your current device is marked This device and cannot be revoked from here
- Each session shows: device name, browser, operating system, approximate location, and last activity time
- Look for any sessions you don't recognise — an unfamiliar device or unexpected location is a red flag
- Sessions you haven't used in over 30 days are flagged as Inactive — good candidates to revoke
| Device | Location | Last Active | Status | Action |
|---|---|---|---|---|
| MacBook Pro — Chrome | Melbourne, AU | Now | This device | — |
| iPhone 15 — Safari | Melbourne, AU | 2 hours ago | Active | Revoke |
| Windows PC — Edge | Sydney, AU | 38 days ago | Inactive | Revoke |
| Android — Chrome | Unknown | 52 days ago | Inactive | Revoke |
Revoke Access from a Device
Revoking a session immediately logs that device out of your QuickEstimate account. The next time someone tries to use that device, they'll be required to log in again from scratch.
- In the Active Sessions list, locate the device you want to remove
- Click Revoke on the right side of that session row
- Confirm the action in the prompt that appears — this cannot be undone
- The session is terminated immediately — that device is now logged out
- Repeat for any other sessions you want to remove
- To log out of all devices at once, click Revoke All Other Sessions at the bottom of the list
Revoking a session does not delete any data. The device can still log back in using valid credentials — revoking only ends the current active session for that device.
What to Do if You Suspect a Breach
If you notice unfamiliar sessions, receive unexpected login notifications, or suspect your credentials have been compromised, act quickly using these steps.
- Go to Security Settings and click Revoke All Other Sessions immediately
- Change your password right away to lock out anyone using your old credentials
- Enable or re-verify your Two-Factor Authentication to add a second barrier
- Check your email account for any forwarding rules or unexpected access — attackers often target email first
- Review your estimates and client data for any unexpected changes or exports
- Contact QuickEstimate support and report the suspected breach — we can review server-side access logs
QuickEstimate will never ask for your password via email, chat, or phone. Any message requesting your password or login link is not from us — do not respond to it.
When QuickEstimate Automatically Ends a Session
In addition to manual revocation, QuickEstimate automatically terminates sessions in the following circumstances:
- No activity on a session for 90 consecutive days — session is expired automatically
- Your password is changed — all sessions except your current device are immediately invalidated
- Your account email address is changed — all active sessions are terminated as a security measure
- An admin on your account revokes access for a team member — their sessions end immediately
- Your account subscription lapses — all sessions are suspended until the account is reactivated
You'll receive an email notification whenever a session is ended due to a security event — not for routine inactivity expirations.
Tips for Keeping Your Access Secure
Good access hygiene is an ongoing habit, not a one-time setup. These practices keep your account protected over the long term.
Use a Password Manager
Tools like 1Password, Bitwarden, or Dashlane generate strong unique passwords and remember them for you. Never reuse a password across multiple services.
Audit Sessions Quarterly
Set a reminder every three months to open Active Sessions and revoke any devices you no longer use — old phones, work laptops returned to employers, or shared computers.
Always Log Out on Shared Devices
If you ever access QuickEstimate on a public or shared device, manually log out and do not save your credentials in that browser — revoke the session immediately after.
Secure Your Email Account First
Your email is the key to every password reset. If your email is compromised, every linked account is at risk. Enable 2FA on your email provider as a priority.
Watch for Login Alert Emails
QuickEstimate sends an email when a new device logs in to your account. If you receive one you didn't trigger, revoke all sessions and change your password immediately.
Pair With Two-Factor Authentication
A strong password and active session management are most powerful when combined with 2FA. Enable it from the Security Settings page if you haven't already.
Frequently Asked Questions
No. The Revoke All Other Sessions button only terminates sessions on other devices — your current session remains active. You will not be logged out of the device you're using when you perform the revocation.
Yes — by design. When you save a new password, all active sessions except your current one are immediately invalidated. Anyone logged in on another device will be prompted to sign in again with the new password. This is intentional security behaviour to protect against credential theft.
The Active Sessions panel shows approximate location (city and country) rather than raw IP addresses. If you need precise access logs for a security investigation — for example, to report a breach — contact QuickEstimate support and our team can provide detailed server-side logs for your account.
First, check your spam or junk folder — email filters occasionally misclassify automated messages. Ensure you're entering the exact email address registered to your account. If you still don't receive it after 2 minutes, try requesting another reset link. If the issue persists, contact QuickEstimate support with your account name and we can verify the registered email address manually.
Yes, on Business plans. Account administrators can force a password reset for any team member from the Team Settings page — the member will be prompted to set a new password on their next login. Admins can also enforce minimum password requirements and mandatory 2FA across all team accounts.
Sessions on trusted devices remain active indefinitely as long as you log in at least once every 90 days. After 90 days of inactivity, the session is automatically expired and you'll need to log in again. Sessions on non-trusted devices expire after 24 hours of inactivity regardless of the 90-day rule.
Account Access Locked Down — You're All Set
You've covered all four security essentials. Your QuickEstimate account is as protected as it can be.