Signing in
Password with two factors, passkey, QR code, Google, Microsoft and company sign-in – and how you sign out again.
Several ways lead into your account. All of them end in the same session, and you can mix them as you like: password today, passkey tomorrow, QR code on the road.
E-mail and password
Passkey
QR code
Google or Microsoft
With e-mail and password
- E-mail address: the address you registered with.
- Password: the eye icon shows what you typed in plain text, useful on a phone.
- Sign in starts the session.
If something is wrong, the page names the reason in one sentence above the form, and you can try again straight away. For security reasons the message does not reveal whether an account exists for the address at all.
The other ways on the same page
Under or continue with are the other ways: Google (1), Microsoft (2), passkey (3) and QR code (4).
Two-factor sign-in
If two-factor sign-in is on for your account, a six-digit code by e-mail follows the password. Only with it does the session begin.
Get the code from the e-mail
The code goes to your sign-in address and is valid only for a short time.
Enter the code
- Enter the code.
- Confirm it. Then you are signed in.
A new code voids the previous one: Send code again requests a fresh one. With Back to sign-in you cancel without a session being created.
Forgotten password
Choose “Forgot password?”
The link is below the password field.
Enter your address
- Enter your e-mail address.
- Request the code.
The answer is always the same. It does not reveal whether an account exists for the address.
Get the code from the e-mail
Set a new password
- Enter the code from the e-mail.
- Set your new password.
- Save password: you are signed in at once, no second sign-in needed.
The code is single-use and expires. If needed, you end sessions on other devices through Sign out of every device.
Changing or setting a password
You handle both under Profile → Security in the same card.
- Current password
- New password: the display below shows which rule is still missing.
- Repetition
- Save
An account created through Google or Microsoft has no password at first. Then the card is called Choose a password and does not ask for a current password:
The same rules apply as at registration: at least 8 characters, upper- and lower-case letters, a digit and a special character. Afterwards both ways are open to you: the password and still the provider.
Not signed in? Then Forgotten password leads to the same goal. It works even if a password was never set.
Signing in with a passkey
A passkey replaces the password with what your device provides: fingerprint, face recognition or device PIN. The private key stays on your device. Only the public key is stored, and that alone signs nobody in.
Set up a passkey
Under Profile → Security:
- Give the passkey a name, such as “Office laptop” or “iPhone”. That helps when tidying up later.
- Register this device as a passkey opens your operating system's dialog. Confirm with fingerprint, face or PIN.
The passkey is in the list
Every passkey is in the list with its name. Remove deletes it here. It stays on the device, but is worthless for your account.
Sign in with the passkey
A click on Passkey opens your operating system's dialog again. After confirming, you are signed in, with no address and no password. In the dialog you can also choose your phone and use its passkey while you sit at the computer.
A passkey does not replace your password, it stands next to it. On someone else's computer that does not hold your passkey, you keep signing in with the password.
Signing in with a QR code
Meant for the case that you are already signed in on one device and want to sign in a second one without typing there: at the editing suite, at the reception computer, on the tablet on set. Without a signed-in device this way does not work.
Show the code on the new device
Sign-in page → QR code. You see:
- the QR code to scan,
- the same code in plain text to type.
A counter shows how long the code is valid. If it expires, you get a new one below it.
Confirm on the signed-in device
Scan the QR code with the camera. It opens this page directly. Without a camera you open /qr there:
- Enter the code in plain text.
- Confirm releases the sign-in.
Released
The signed-in device confirms the release.
The new device is signed in
The waiting screen moves on by itself. Because the device is new, the app asks straight away whether it should be registered for your account. More under Devices.
Show the code to nobody and share no screenshot of it. Whoever scans or types it and confirms it on their signed-in device signs you in on your screen. An expired code is worthless. That is intended.
What happens technically: the new device keeps a secret identifier to itself and regularly asks the server whether someone has confirmed. The QR code only holds the short display code, never the secret. A photo of the screen alone is therefore not enough; it always takes the confirmation on a signed-in device.
Signing in with Google or Microsoft
Registering and signing in are the same button here. What comes of it is decided by your confirmed address at the provider:
- Address still unknown: your account is created. No e-mail code is needed; the provider has already confirmed the address.
- Address known: you are signed in to your existing account. No second account is created.
On this way you identify yourself at the provider. Google or Microsoft then confirms to us, digitally signed, who you are. We never see your password at the provider; it is only entered on the provider's page.
Choose a provider
A click on Google or Microsoft takes you to the provider. You leave the app for it, recognisable by the address bar.
Google's own page at accounts.google.com.
Microsoft's own page at login.microsoftonline.com.
Check the address bar before you enter a password. Your Google or Microsoft password belongs only on accounts.google.com or login.microsoftonline.com. We never ask for this password on a page of our own.
Pick an account and consent
The first time, the provider asks whether it may pass on your data. Exactly three details are requested:
Nothing more is requested: no access to mail, contacts or files, no write permission. You can withdraw the consent any time in your account at the provider.
Back in the app
The provider sends you back. In the background a single-use code is exchanged for your session. You see this page only for a moment.
When something gets in the way
If you cancel at the provider or the single-use code expires, the page says so clearly. Sign in takes you back with one click.
What secures it in the background: the round trip carries a single-use random identifier that is checked on the way back, so the return cannot be faked. The code that comes back is single-use and invalid after minutes. And the provider may only send you back to an address stored in advance.
Company sign-in (SSO)
If you work in a company's account, it can decide that its data opens only after a sign-in through its identity provider: Microsoft Entra ID or Google Workspace. This is set up under Administration → Settings. Here is what changes for you as a member; the whole overview is under Company sign-in (SSO).
When your company switches it on
If you are signed in with your password right now, the app switches to this page as soon as you open the next page in the company's account. Until you have signed in through the company, its data stays closed to you; your other accounts do not.
- Sign in with Microsoft (or Google, depending on the company) takes you to the company's provider. Sign in there with your company account; afterwards you continue exactly where you were. Company sign-in then holds for 24 hours on this device.
- End membership if you no longer work for this company. You only leave its account; your own stays.
Back takes you to where you came from, without company sign-in: the company then stays in the account switcher with a lock until you sign in. If you belong to no other account, the button is missing, because without company sign-in there would be nothing to show.
Password and passkey still lead into your own account
Your own sign-in stays as it is: with password or passkey you keep signing in and work in your other accounts. Only for the company's account does this page appear again. The way through the provider is the same as under Signing in with Google or Microsoft.
If company sign-in is turned away
If the account you signed in with at the provider does not belong to your company, the page says so. Usually it is a private account the browser was still signed in with. Sign out at the provider or switch the account there and try again with your company account. If the company account is already linked with another person, the page says that too: every company account opens the company only for the person it was first signed in with. If you cancel at the provider, that shows here as well.
One sign-in, managed centrally
Your own account stays yours
Signing out
- Tap your name at the bottom of the sidebar.
- Choose Sign out in the profile menu.
On a phone you first open the sidebar with the icon at the top left. Signing out ends the session in this browser: sign-in data and local caches are discarded, running connections are closed.
Do not confuse it with Sign out of every device: that ends every session on all devices, the right move after a password change or when a device got lost. Both are under Devices.
Signing out is not removing the device. After signing out, this browser remains a trusted device and keeps its slot. If you want to free the slot, remove the device on the devices page.
Where to go next
- Devices: slots, names, signing out everywhere
- Registration: create an account or accept an invitation
- Overview: terms and several accounts