Getting started

Signing in and two-factor

How to sign in, where you land, how to add a second step so a stolen password is not enough, and how to reset a password.

Updated Getting startedLast checked

Sign in to Orin OS with your work email and password, and add a second step so a stolen password alone cannot reach your business's data. This page also covers what to do when you have forgotten your password.

Before you start

  • An account. If your firm invited you, open the invitation email and follow it; invitations last seven days. If you have no account yet, choose Create an account on the sign-in page. An account on its own does not give you a business: somebody at your firm still has to invite you to theirs.
  • Your work email address, the one the invitation was sent to.
  • For two-factor: an authenticator app on your phone, and somewhere safe to keep backup codes.

Steps at a glance

Signing in

  1. Step 01

    Sign in with your email and password

    On the Sign in page, enter your Work email and Password, then choose Sign in. The eye icon in the password field shows what you typed.

    The Orin OS sign-in form with Work email, Password, a Forgotten your password link, the Sign in button and a Create an account link.
    The sign-in page. Forgotten your password? sits under the password field.

    If sign-in is refused

    "That email address and password do not match an Orin OS account" means one of the two is wrong. Orin OS never says which, so check both. "Too many sign-in attempts in a few seconds" means wait ten seconds and try again. If the message says your address has not been verified yet, open the verification link in your email first.

  2. Step 02

    Enter your code, if two-factor is on

    If you have turned on two-factor, a Two-step verification page follows your password. Enter the 6-digit Authenticator code from your app. If you do not have your phone, choose Use a backup code instead and enter one of the backup codes you saved.

    Screenshot not captured: this page appears only during a real sign-in with two-factor turned on.

    Several wrong codes in a row lock the account for a few minutes. Wait, then try again. If you wait too long on this page, you are returned to the password step with a message saying why; enter your password again.

  3. Step 03

    Know where you land

    Where Orin OS takes you depends on how you arrived:

    • If you followed a link to a particular page and were asked to sign in first, you go straight to that page.
    • Otherwise, if you have set a homepage with the star beside a page title, you go there.
    • Otherwise, if your business holds only one app you can open, you go into that app.
    • Otherwise you see your business list. Choose a business to open it.
    The Orin OS business list after signing in, showing the last business used and the other businesses.
    The business list, where you land when nothing else decides it.

Turning on two-factor

Two-factor means that after your password you also enter a 6-digit code from an authenticator app. Until you turn it on, Practice shows a Protect your account notice on the Overview with a Set up two-factor authentication button that brings you to the same place.

  1. Step 04

    Turn on two-factor

    Open Security (in Settings, under Your account). In the Authenticator app panel, choose Turn on. Enter your Current password and choose Continue.

    The Security page with the Authenticator app panel marked Off and its Turn on button highlighted as 1.
    Security, with the Authenticator app's Turn on button (1).
    The Turn on two-factor authentication dialog asking for the current password, with Cancel and Continue.
    Confirm your password to begin.
  2. Step 05

    Scan the code and save your backup codes

    Scan the QR code with your authenticator app. If the app cannot scan, copy the Secret key into it by hand. Before you go on, store the backup codes shown under Save these backup codes now somewhere other than your phone: each one signs you in once if you lose the app. Then enter the current 6-digit code from the app and choose Turn on two-factor authentication.

    Screenshot not captured: this step creates a real authenticator secret for the account, so it was not run on the shared demo account.

When it works, a confirmation says two-factor authentication is on, and the Authenticator app panel says you enter a 6-digit code each time you sign in. Your next sign-in asks for a code.

An administrator can require two-factor for everyone in the business: Access control, the Security tab, Require two-factor sign-in for everyone in this business.

Resetting a forgotten password

  1. Step 06

    Reset a forgotten password

    On the sign-in page, choose Forgotten your password?. Enter your Work email and choose Send a reset link. Open the link in the email; it takes you to a page where you choose a new password. Then sign in with it.

    The Reset your password page with a Work email field, a Send a reset link button and a Back to sign in link.
    Reset your password.

    If no email arrives, check junk mail, then ask an administrator at your firm which address your account uses.

Signing out

Open the account menu at the far right of the top bar and choose Sign out. Covering the screen with the lock icon is not the same thing: it hides the screen, and reloading the page gets past it.

Next steps

Common questions

Can I use one account at more than one business? Yes. One account reaches every business you belong to, and the business list shows them all.

I lost the phone with my authenticator app. Sign in with a backup code instead. Each code works once, so in Security use Regenerate backup codes to get a fresh set; it asks for your password, and the new set cancels the old codes. Turning two-factor off needs a code from the app, so if the app is gone for good and you have no backup codes left, ask an administrator at your firm or report a problem from the help menu.

I was signed out unexpectedly. Sign in again. If it keeps happening, tell an administrator at your firm: your account may have been deactivated.

My invitation link does not work. The page says why. Invitations last seven days and can be withdrawn or replaced, so ask the firm to send a new one.

Was this page helpful?

Still stuck?

Raise a ticket