Sign-in and security settings
Sign in with a password, an emailed link or Google, turn on two-step verification, and set how long sign-ins last across your workspace.
Ways to sign in
- A password, of at least twelve characters.
- Email me a link: a link that signs you in once, good for fifteen minutes, sent only to an address that already has an account.
- Continue with Google, for an address that already has an account, has been invited, or has its Google account connected.
Microsoft connects a mailbox but can’t be used to sign in. A link to reset your password lasts an hour, and resetting it signs you out everywhere. One browser can be signed in to five accounts at once. Single sign-on over SAML isn’t available yet.
Two-step verification
Turn it on for yourself under Settings → Security → Two-step verification: scan the code with an authenticator app, or type in its key, and enter the six-digit code it shows. You get ten backup codes, each good once; keep them somewhere safe, and choose New backup codes to replace them.
The code is asked for after your password and after an emailed link. Signing in with Google relies on Google’s own second step. In the phone apps, sign in with your password and the code, since an emailed link isn’t accepted there for an account with two-step verification. Each person turns it on for themselves; an admin can’t require it yet.
Too many wrong tries
Ten wrong passwords for one address within fifteen minutes stop it taking passwords for up to fifteen minutes, though an emailed link still works. Ten wrong codes in a row lock the second step for fifteen minutes.
How long sign-ins last
Under Settings → Security → Automatic sign-out, an owner or admin sets two limits for everyone in the workspace: Sign out after inactivity, from 15 minutes to a day (2 hours unless changed), and Ask to sign in again after, from 8 hours to 30 days (30 days unless changed). The browser warns you two minutes before it signs you out. The phone apps stay signed in until somebody signs them out.
Where you’re signed in
Settings → Security lists the browsers and phones you’re signed in on. End signs one out, and you can end all the others at once. Changing your password signs out every browser and phone but the one you’re using.
Updated
Still stuck?
Write to support@migaru.ai and a person will answer, or browse every article.