On this page
Two emails can reach you from us about your account, and they behave differently.
| Link | Valid for | Reusable |
|---|---|---|
| Email verification | 24 hours | No — single use |
| Password reset | 1 hour | No — single use |
Both are single use, and sending a new one cancels the old one. If you press "resend" twice, only the newest link works — go to the most recent email, not the first.
Verification
Follow the link and the banner disappears. Until you do, everything works except subscribing to a plan (see Creating your workspace for why that one).
If it has not arrived:
- Check spam. It is a transactional message from a new sender to you.
- Confirm the address is right. If you typed it wrong at signup, nothing will ever arrive. Your name and email address cannot be changed yet, so the workspace has to be created again under the correct address.
- Press Resend email on the banner. You can ask for one a minute.
If you open an old link that has expired or been replaced, the page offers to send a new link to the address the old one went to, with no sign-in needed. It gives you one a minute as well.
Changing a password you know
Open the account menu in the top right, choose Your account, and open the Security tab. You will be asked for your current password, and for the new one twice. Being signed in is not proof of who is at the keyboard, and an account left open on a shared or stolen laptop is exactly the case that matters here. You can change it up to five times an hour.
A new password needs at least 8 characters, with an uppercase letter, a lowercase letter and a digit, and it cannot be a very common one. It also has to differ from your current one. The same rules apply when you sign up, accept an invitation or reset a forgotten password.
Changing your password signs you out on your other devices, and leaves you signed in on the one you are using. That is deliberate: it is how you take a session back from a device you no longer have, without having to sign in again yourself afterwards.
It changes nothing for anyone else on your team. If you need to remove their access, that is Inviting your team: deactivating a member stops their sign-in and their sessions.
Resetting a password you have forgotten
Request it from the sign-in page. The response is the same whether or not the address has an account, and that is intentional: an error saying "no such user" is a way for a stranger to find out who has an account here. If nothing arrives, the likeliest reason is that the address has no account.
Only the newest link works. Every time you ask for a reset, the earlier links stop working — if you asked twice, the first email's link will say it has expired or was replaced by a newer one. Use the most recent email. You can ask for up to three resets an hour from one internet connection, and other people's requests do not count against yours; past that the page tells you roughly how long to wait before asking again.
If setting the new password fails, the page says why: the link is no longer valid (ask for a new one), or the password was refused, in which case it lists the rules it did not meet.
The reset link lasts an hour. Signing in with the new password afterwards is normal — a reset does not sign you in on its own. A reset also signs you out everywhere, including a session you may still have open elsewhere. A device that is already open can keep working for up to about 15 minutes before it is asked to sign in again.
Sign-ins, password changes, resets and failed sign-ins are recorded. They appear in your Activity log, which owners and admins can open from Admin → Activity log, so an attempt you do not recognise can be seen and followed up.
Signing out
Signing out ends the session on that device. It does not affect anyone else on your team, and it does not disconnect a channel or pause your bot — your workspace keeps answering leads while nobody is signed in. That is the point of it.