SyntrumDocs
Open app

Authentication & 2FA

Your Syntrum account is the key to a workforce that acts in your real business tools — so it's worth locking down. This page covers verifying your email, signing in, recovering a forgotten password, and turning on two-factor authentication (2FA).

Every code Syntrum emails you — email verification, password reset, two-factor reset — works the same way: six digits, valid for 10 minutes, five attempts. Spaces and dashes are ignored, so you can paste straight from your mail app.

Verifying your email#

New accounts confirm their address before they can be used.

  1. Create your account. Syntrum emails a 6-digit code to the address you signed up with.
  2. Enter the code on the Verify your email screen. That signs you in and takes you on to setup.
  3. Nothing arrived? Use Send a new code once the resend timer runs out. Check spam first — the code is often just sitting there.

Your account already exists at this point, so don't sign up again — that address is taken now and a second attempt is refused. If you close the tab before entering the code, just sign in: an unverified account is sent a fresh code and taken straight back to the code screen.

Accounts that existed before this shipped are already verified. Nobody is asked to re-confirm an address they registered months ago.

Signing in#

At the sign-in screen, enter your email and password and click Sign in.

  • Remember me keeps you signed in on this device.
  • Forgot password? starts a reset (below).
  • If your account has 2FA enabled, you'll be asked for a code next (below).
  • If your address was never verified, you'll be taken to the code screen with a fresh code already sent.

Your email is your identity — it can't be changed from within the app. Capitalisation doesn't matter when you sign in: Ada@Acme.io and ada@acme.io are the same account. Sign-in-with-provider (OAuth) buttons appear on the sign-in screen; where offered they let you continue with an external account. Availability of individual providers depends on your environment.

Forgot or reset your password#

  1. On the sign-in screen, click Forgot password?
  2. Enter the email you sign in with and click Send reset code.
  3. If an account exists for that email, a 6-digit code is sent. It expires in 10 minutes.
  4. On the next screen, enter the code and choose a new password (at least 8 characters), confirm it, and save.
  5. Sign in with the new password.

Resetting your password signs you out everywhere — every device, every browser. Sign back in on each one you use.

It also confirms your email address, so this is a way back in if you never finished verifying.

Password-reset emails depend on email delivery, which is still being set up in some environments. If you don't receive one, or you see a note that reset "isn't available just yet," ask your workspace Owner to help you back in, or contact support. See Troubleshooting.

To change your password while signed in, use SettingsSecurity → Change password — enter your current password and a new one (min 8 characters).

Two-factor authentication#

2FA adds a second step at sign-in: a rotating 6-digit code from an authenticator app on your phone. Even if someone has your password, they can't get in without your device.

Turning it on#

In SettingsSecurity, next to Two-factor authentication, click Enable:

  1. Scan the QR code with an authenticator app (Google Authenticator, 1Password, Authy, etc.). Can't scan? Copy the setup key shown and enter it manually.
  2. Enter the 6-digit code your app displays and click Verify.
  3. Syntrum shows your recovery codes. Save them now — copy them or download the .txt file. This is the only time they're shown.
  4. Click I've saved them. The Security tab now shows 2FA as Enabled.

Recovery codes are your way back in if you lose your phone. Each one works once. Store them somewhere safe and separate from your password manager's 2FA — if you lose both your authenticator and your recovery codes, you can be locked out.

Signing in with 2FA#

After your email and password, you'll see a Two-step verification screen. Enter the current 6-digit code from your authenticator app and click Verify and sign in. Lost your device? Enter one of your recovery codes instead — the same field accepts either.

The verification step is time-limited (about five minutes). If you take too long, you'll be asked to sign in again from the password step — nothing is wrong, just start over.

Moving to a new phone#

In SettingsSecurity, click Reconfigure next to Two-factor authentication. Confirm with a code from your current authenticator (or a recovery code) — Syntrum turns the old one off and shows you a fresh QR code straight away. Scan it, verify a code from the new app, and save the new recovery codes.

Do this before wiping the old phone, while it can still produce a code.

Turning it off#

In SettingsSecurity, click Disable next to Two-factor authentication, then enter a current 6-digit code or a recovery code to confirm. Your account then relies on your password alone.

Lost your authenticator?#

If you can't produce a code and have no recovery codes left, you can still get back in on your own.

  1. On the Two-step verification screen, click Lost your authenticator?
  2. Enter your email and password. Syntrum emails a 6-digit code.
  3. Enter the code. You're signed in, and two-factor is now off.

This takes your password and your inbox — an attacker with only one of them gets nowhere. It also clears every recovery code and signs out every other session.

Your account is protected by your password alone until you set two-factor up again, so re-enrol immediately. Syntrum drops you on the Security tab for exactly that reason.

What's next#