Knowledge Base
Release Notes: Rezgo 14.1
Release Date: October 1, 2025
Security Updates Overview:
As part of Rezgo’s commitment to maintaining the highest security standards, we’re in the process of making several upgrades to further safeguard your business and your customers’ data. When complete, these updates will provide the same level of protection you’d expect from leading payment processors and financial institutions, with as little impact on your daily operations as possible.
We will be making additional improvements in the weeks to come. Here are the changes in today’s update:
User and Password Updates:
Changes to Note:
- Shared User Emails: When resetting passwords, you can no longer reset individual user accounts tied to a single email. All users associated with that email will be reset to the new password. We strongly recommend that every person who accesses your Rezgo account has their own user(s) associated with their own email address to protect your data and ensure ease of access. You can create unlimited user accounts at no extra charge.
- Change Password: Administrator accounts can no longer manually change other users’ passwords, but can send password reset links from the User Details page. Please note: To prevent a user from accessing Rezgo, please deactivate their user account. Blocking access via password changes is not a secure solution.
Other Improvements:
- Password Assignment: To ensure password security, Rezgo no longer assigns passwords to new users. New users will receive a secure link to set up a password that follows your security policy requirements.
- Password Change Location: Users can now change their own passwords from their Profile Details or User Details page without additional security permissions.
- Force Sign Out: The “Sign User Out” button, accessible to administrators with the required permissions, is now available on the User Details view. Previously, this option was only available via the 3-dot menu on the User List view.
- Access to Account: The “Services That Can Access This Account” section is now available only on the User Profile Details view and can only be managed directly by the user.
- User Profile: The Pinned Contents button has been deprecated.
Security Policy Updates:
- Minimum Password Length: The minimum password length has been increased to 12 characters. This change applies to new users creating a password and existing users resetting their password, and is now the minimum length available in your security policy settings.
- User Password Changes: The toggle to enable or disable whether users can change their password has been removed from the Security Policies section. Users can now change their password whenever required from their User Profile section.
- 2 Factor Authentication (2FA) Labels: The labels on 2FA toggles have been updated from “2FA” to “MFA,” but functionality is unchanged.
- Multi-Factor Authentication (MFA) types: The toggle to allow or disallow SMS and Email MFA has been removed – if MFA is enabled, users can set up email, SMS, or TOTP (authenticator) MFA.