Signing in

Everyone signs in the same way: you enter your email and type the 6-digit code sent to it. Nothing else to remember. Some people also have an authenticator app as a second step.

Sign in with an email code

1. On the sign-in page, enter your address under Work email and select Email me a code.
2. Open the email and type the code into 6-digit code. It works for 10 minutes and checks itself once all six digits are in, or select Verify and sign in.
3. If your account uses an authenticator app, enter the code it shows (below).

You land back where you were if your session had ended mid-task.

No email? Check spam or junk, and that it’s the address your firm uses for you. Select Send a new code (there’s a short wait between codes). Only the newest code works, so use the latest email.

Wrong code. The page says so, and how many tries are left once they’re low. After too many wrong tries, or once 10 minutes pass, the code stops working and the button becomes Send a new code (wrong_code, code_expired).

Sign-in is paused. If too many codes are asked for one address, sign-in pauses and the page says when you can try again (too_many_requests, locked). Wait until then, or contact support.

Signed out. Sessions end after a while to keep your account safe, and you’re also signed out when someone changes your role. Sign in again to carry on.

The authenticator step

An authenticator app (Google Authenticator, Authy or similar) adds a second step after the email code. It’s optional unless the owner requires it for all staff, in Team and roles.

• You have one: after the email code, One more step asks for the 6-digit code your app shows. Enter it and select Verify and sign in.
• Your firm requires one and you don’t have one yet: Set up an authenticator shows a QR code (or a link on a phone, and the key to copy). Add it to your app, enter the code it shows and select Turn on and sign in.

Five wrong authenticator codes end the attempt, and you start again from your email. Select Use a different email to start over at any time.

Reset your authenticator

Lost your phone, or moving to a new app? Reset it yourself while you’re signed in:

1. Go to Settings, then Your authenticator (under You).
2. Enter the current code from your authenticator app and select Reset my authenticator.
3. Remove the old entry from your app.

You stay signed in. At your next sign-in you set up a new one if your firm requires it; otherwise you sign in with an email code alone until you add one. You’re emailed whenever your authenticator is reset. If the page says you don’t have an authenticator to reset, you sign in with an email code only.

Can’t get a code from it at all? An owner or admin can reset it for you from Team and roles. If you’re the owner, email support. If you’re also on another firm’s staff, your one authenticator serves both, so support resets it.

Sign out everywhere

To sign out of every device at once, use Sign out everywhere in your account menu. An owner or admin can also sign a team member out everywhere, for example after a lost phone.

Who can do what

Everyone signs in the same way, whatever their role, so there’s no table here. Who can require an authenticator, or reset someone else’s, is on Team and roles.