Skip to content

Sign in and protect your account

Use your invitation, recover a forgotten password and find the controls for two-step sign-in.

Checked against the screens:

Screenshots show website controls checked on 13–14 October 2026. Captions identify live-site captures and local training examples made with the actual website components. No real person’s record is shown. Your permissions, enabled features and organisation’s wording may change what you see.

For anyone with an account. Use the invitation and website address supplied by your organisation.

Steps

  1. Open your organisation's sign-in page.
  2. Enter your Email address and Password.
  3. Press Sign in and complete any additional sign-in check shown.
  4. If you have forgotten the password, choose Forgot your password?.
  5. Once signed in, open Settings, then Security.
  6. Use Change password when you need to replace your password.

If it goes wrong

Before your first sign-in

An invitation is for a particular email address. Use that address even if you normally read email through an alias. Follow the invitation to finish setting up your account, then return to the organisation's website.

If your organisation created an account with a starter password, receive that password through the agreed secure route. Replace a shared starter password promptly. Never use a colleague's account to get around an access problem.

Password or access problem?

Recover a forgotten password

Choose the password-reset link from the sign-in form and enter the account's email address. Check your inbox and junk folder. Follow the newest reset message, because an older link may no longer work.

If no message arrives, check the address with your administrator rather than repeatedly creating accounts. Do not forward password-reset links to support: anyone with the link may be able to use it.

Find your security controls

The Security page and its Change password card
The password card on the live Security page. Check the instructions before changing account credentials. Select the image to enlarge it.

The password card explains that changing it requires you to sign in again. Finish or safely save ongoing work first. The authentication card shows whether an authenticator is enrolled, or whether its status could not be loaded.

Set up two-step sign-in carefully

If your organisation asks you to enrol, follow the on-screen steps using your own authenticator app. Complete the verification step; seeing a setup code alone does not prove enrolment is finished.

Keep recovery codes in a secure place you can reach if the authenticator is lost. Do not store them in a child's record, ordinary help request or shared screenshot. When replacing codes, follow the page's instructions about which set remains valid.

When a page signs you out

An inactivity sign-out is a security measure. Sign back in before continuing. If you were writing, return to the same record and check for saved work or a restore prompt before starting again.

Do not assume that a page left open on screen is still connected. A save can fail after the sign-in has expired. Read the saving message and verify your work is present after returning.

Before leaving a shared device