Help Guides
Signing in and keeping your account secure
Sign in
Enter your email and password on Sign in. If you turned on two-factor authentication, enter the 6-digit code from your authenticator app next, or one of your recovery codes.
Forgot your password? Choose Forgot password?, and we'll email a reset link that works once and expires after an hour.
After 5 wrong passwords in 15 minutes, the account is locked for 15 minutes. That protects you from someone guessing.
The error never says whether an account exists for the email, so a wrong email and a wrong password look the same.
New account, invitation, or never had a password
- Create an account on Create account. You'll get an email to verify your address. Some actions, such as registering an app, need a verified email.
- Invited by an administrator or an organization? The invitation link opens Accept invitation, where you choose a password and are signed in.
- Never set a password? This applies to the platform owner's account, and to people an administrator created directly. Use Forgot password? on Sign in. It sends the same one-hour link whether or not you've ever had a password, and the link opens Set a new password.
Turn on two-factor authentication
Turn on two-factor authentication if you administer the platform, and it's strongly recommended for everyone else.
The web Hub requires it for staff: anyone holding a platform permission sees Administration, Operations and Developer screens only after turning it on. The API itself doesn't enforce this yet (API issue #50).
- Open Account → Security → Turn on two-factor.
- Scan the QR code with an authenticator app. On iPhone, iPad and Mac, the built-in Passwords app works and fills codes automatically.
- Enter the code it shows to confirm.
- Save your 10 recovery codes somewhere safe. Each works once, and they're shown only this time.
See where you're signed in
Account → Security lists every session with its device and last activity. Sign out any one you don't recognize, or choose Sign out everywhere to end every session on every device at once.
Signing out also stops push notifications to that device.
If you lose your phone
- Sign in somewhere else and use Sign out everywhere.
- Lost your authenticator too? Use a recovery code. If you've no recovery codes left, a support agent can reset two-factor after verifying your identity.
Screens in this guide
AUTH-01 · Sign in AUTH-02 · Two-factor challenge AUTH-03 · Create account AUTH-04 · Verify your email AUTH-05 · Forgot password AUTH-06 · Set a new password AUTH-07 · Accept invitation ACC-03 · Change password ACC-04 · Security ACC-05 · Turn on two-factor ACC-06 · Turn off two-factor