Account & settings
Sign-in & security
Manage your passkeys, two-factor authentication, and linked Google or Microsoft accounts.
Settings → Account and Settings → Security are where you manage how you sign in.
Your own sign-in
- Emailed code: always available. The code goes to the email you sign in with. It cannot be turned off.
- Passkeys: under Settings → Security, select Add passkey on each device you use. See passkeys.
- Google and Microsoft: under Settings → Account, in Sign-in methods, select Link next to Google or Microsoft. After that, Continue with Google or Continue with Microsoft signs you in.
- Two-factor authentication: also called 2FA or MFA. Under Settings → Security, select Enable two-factor, scan the QR code with your authenticator app, and enter the code it shows. Save the recovery codes you get: each one works once if you lose your authenticator. After that, an emailed code, Google, or Microsoft also asks for your authenticator code. A passkey does not.
Your agency may require two-factor before you open a child record.
For agency admins
If your agency uses single sign-on, an admin can require it under Settings → Single sign-on. Members are then asked for their work account when they open the agency, not on the sign-in page. Each change is recorded in your agency's audit log.