**One email address and one password sign you in to every WrkLst account you belong to. This article explains the ways to sign in, how to add a passkey or two-factor authentication, how long you stay signed in, and what to do when a password does not work.** ## One login for all your accounts You sign in once, with your email address and your password. If you belong to more than one WrkLst account, WrkLst then asks which one you want. Tick the box on that screen, or turn off **Ask me which account when I sign in** under Settings → My Profile → Name & Security, to go straight to the account you used last. You can switch accounts at any time from the menu under your name. ## Three ways to sign in * **Password**: the one you set when you activated your account. * **A sign-in code by email**: WrkLst emails you a six-digit code and you type it in; no password needed. The code is shown large and on its own line, so your phone or Mac can offer to fill it in. * **A passkey**: Touch ID, Windows Hello, a security key or your phone, without a password. The sign-in screens are available in every language WrkLst speaks. Pick yours at the bottom of the page; it carries through into WrkLst. ## Two-factor authentication Two-factor authentication adds a second step after your password or emailed code: a code from an authenticator app such as 1Password, Authy or Google Authenticator. ![Settings → My Profile → Name & Security: 1 Password · 2 Enable two-factor authentication · 3 Register a passkey](https://support-admin.wrklst.art/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBZlk9IiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--6020b17863ff6283a801ab985be7e083cf3052df/en-settings-security.jpg) *Settings → My Profile → Name & Security: 1 Password · 2 Enable two-factor authentication · 3 Register a passkey* 1. Open Settings → My Profile → Name & Security and choose **Enable two-factor authentication**. 2. Scan the QR code with your authenticator app, or enter the key by hand. 3. Type the six-digit code the app shows and choose **Confirm & activate**. **Show recovery codes** then gives you a set of codes; each lets you sign in once if you lose your authenticator, so store them safely. **Regenerate recovery codes** replaces the set, and **Disable** switches two-factor authentication off; signing in then requires only your password and any registered passkey. Signing in with a passkey counts as the second factor, because the passkey proves that you hold the device and have unlocked it. No authenticator code is asked after a passkey. ## Passkeys Under **Passkeys** on the same page, choose **Register a passkey** and give it a name, for example "MacBook Touch ID". The list shows when each passkey was last used; you can delete one at any time and register a new one whenever you like. Passkeys need a browser that supports them. ## How long you stay signed in Right after you sign in, WrkLst asks once: stay signed in on this device, or end the session by itself when you stop working. Pick "this session only" on a shared or borrowed computer. A browser you chose to stay signed in on keeps you signed in for three months, counted from your last visit. **Logout** in the menu under your name ends your session on the computer you are using and closes every WrkLst account open in that browser. Everywhere else you stay signed in. ## When your password does not work A rejected sign-in is not a dead end: the login screen offers to email you a password reset link, or a six-digit code you type in to sign in straight away. If you have two-factor authentication switched on, you still confirm with your app. After you choose a new password through the reset email, you are asked to sign in with it, so a reset can never skip the confirmation from your authenticator app. On the same screen you can tick **Also disconnect my apps and devices**: it signs the WrkLst app out on every iPhone, iPad and Android device and ends your personal API keys and address book connections, in all your accounts, which is useful when a device is lost. If you only forgot your password, leave it unticked. To change your password while you are signed in, Name & Security offers **Sign out to reset password**: sign out and use **Forgot account?** on the login screen. If you have lost both your authenticator and your recovery codes, an administrator can reset your sign-in under Settings → User Management. That clears your two-factor authentication, passkeys and active sessions; you keep your password. ## Changing your email address Under **Email** in Name & Security, enter the new address and choose **Send confirmation code**. Enter the six-digit code WrkLst sends to the new address and choose **Confirm new address**; nothing changes until you do, so a typo can never lock you out. The address changes in every WrkLst account you belong to at once. Only you can change your own address, never a colleague or administrator, and WrkLst asks for your password first. ## Related articles * [My Profile: security, preferences and connected apps](/hc/wrklst-docs/articles/1790900005-my-profile-security-preferences-and-connected-apps) * [Working in several WrkLst accounts](/hc/wrklst-docs/articles/1790900003-working-in-several-wrklst-accounts) * [Users, roles and permissions](/hc/wrklst-docs/articles/1790900004-users-roles-and-permissions) * [Account Activation](/hc/wrklst-docs/articles/1767341658-account-activation) * [Is WrkLst secure?](/hc/wrklst-docs/articles/1767343770-is-wrk_lst-secure)