Security

Settings → Security (/settings/security) manages account and org security preferences.

Sign-in

On the login page you can sign in with email and password, Google, Microsoft, or a passkey. Signup offers the same Google and Microsoft options. An existing email account is linked automatically when you sign in with Google or Microsoft using that address.

Two-factor authentication (2FA)

Enable 2FA for your user account. Sign-in may prompt for a verification code after password entry. Repeated failed codes temporarily lock 2FA verification.

Screen lock

An organisation admin turns Screen lock on or off under Settings → Security. It is off until an admin enables it.

When screen lock is on and a member has no PIN yet, the dashboard asks them to choose a 4 digit PIN before continuing. They can then enrol a fingerprint on that device, or skip it. Organisations without screen lock load normally. The PIN works on every device. The fingerprint works only on the device where it was enrolled.

After 20 minutes with no keyboard, pointer, touch, or scroll, the dashboard locks. Enter the PIN, or use the fingerprint button when this browser has one enrolled. Three wrong attempts sign that session out and clear the PIN. The next sign-in asks for a new PIN. Fingerprints already enrolled stay, and work again after the new PIN is saved.

Change the PIN, or add and remove this device’s fingerprint, from Profile. Turning the organisation switch off stops the lock and keeps stored PINs.

Passwords

Use Forgot password on the login page to reset via email. Admins cannot read your password — only reset flows.

Sessions

Sign out from Profile or /logout on shared machines. Org-level security policies may evolve — check this page for current options.