Signing in
Email or username first, then your password — plus a code if two-factor is on.
The two steps
- Identify yourself. Enter the email address or username you signed up with, then choose Next.
- Enter your password. The account you are signing in as is shown above the field; select it to go back and use a different one.
If two-factor authentication is enabled you are then asked for a 6-digit code. See below.
If sign-in fails
| What you see | What it means |
|---|---|
| Wrong password | The password did not match. The message is identical whether or not the account exists, so it never reveals which addresses are registered. |
| Account locked | Too many failed attempts in a row. Wait for the lockout to expire and try again, or reset your password. |
| Email not verified | The account was created but never activated. Open the link from the verification email. |
Two-factor codes
With two-factor on, sign-in has a third screen asking for the current 6-digit code from your authenticator app. The code rotates every 30 seconds — use the one showing at that moment, not one you copied earlier.
Lost your phone? Enter one of your recovery codes in the same box. Each works once. If you have none left, contact an administrator — no self-service bypass exists, by design.
Forgotten password
- Choose Forgot password? on the password step.
- Enter your account email. The confirmation shown is the same either way — the page cannot be used to test which addresses are registered.
- Open the emailed link and set a new password, twice.
- You are returned to sign-in to use the new password.
Reset links expire shortly after they are sent. If yours no longer works, request another.
Changing your password does not sign out your other devices. If you are resetting because you think someone else had access, also sign out all other sessions afterwards.
Staying signed in
A successful sign-in creates a session tied to that browser. You can see and end sessions from Devices. Signing out from the account menu ends only the current one.