Your sign-in settings belong to you, not your organization. Changing them does not affect your teammates.
Open your Security settings
- Click your name and photo at the bottom of the left sidebar.
- Choose Account.
- Click the Security tab.
The Profile tab next to it shows how you sign in today. Under Sign-in, Method shows your sign-in type and Two-factor shows On or Off.
Ways to sign in to CivAll
The CivAll sign-in page offers several methods. You can use any one that is set up for you:
| Method | How it works |
|---|---|
| Sign in with password | Your email address and password. |
| Sign in with passkey | Your fingerprint, face, or device PIN. See Set up a passkey. |
| Sign in with email code | CivAll emails you a 6-digit code. You type it in to sign in. No password needed. |
| Continue with single sign-on | Your organization's own sign-in system. Shown when your organization has set it up. |
An email code is a way to sign in, not a second step. For a second step, turn on multi-factor authentication (below).
Change your password
- On the Security tab, find Password and click Change password.
- Enter your Current password.
- Enter a New password and type it again in Confirm new password. A strength meter appears as you type.
- Click Change password.
Your new password must:
- Be 8 to 64 characters long.
- Be different from your current password.
When it works, you see "Password changed. Other sessions have been signed out." You stay signed in where you made the change. Any other browser or device where you were signed in is signed out.
If you have multi-factor authentication turned on, CivAll asks you to verify with your passkey before it saves the new password.
If you don't have a password yet
If you joined without a password, the Password card shows Set up a password instead. Click it and CivAll emails you a secure setup link. Open the email and follow the link to choose your password. The link expires, so use it soon.
Tip
Forgot your password? On the sign-in page, choose Sign in with password, then click Forgot password?
Add a passkey
A passkey lets you sign in with your fingerprint, face, or device PIN instead of a password. Click Add Passkey in the Passkeys card to create one. You can add more than one, for example one for your computer and one for your phone.
For step-by-step help, see Set up a passkey.
Turn on multi-factor authentication
Multi-factor authentication adds a second step after you sign in with your password or an email code. CivAll asks you to verify with a passkey before you get in.
Multi-factor authentication is your choice. You turn it on or off for your own account.
- Add at least one passkey first. The switch stays off until you do.
- In the Multi-Factor Authentication card, turn on Require passkey verification after login.
From then on, after you enter your password or email code, you see Verify Your Identity. Click Verify with Passkey and use your fingerprint, face, or device PIN. Your password manager may offer your passkey on its own.
If you sign in with a passkey, there is no extra step.
To turn multi-factor authentication off, turn off the same switch.
Warning
If you remove your last passkey, CivAll turns multi-factor authentication off for you. Add a new passkey and turn the switch back on to restore it.
When your organization uses single sign-on
Some organizations sign their people in through their own identity provider. This is called single sign-on.
If your account is linked to it, the Security tab shows a Single sign-on card. It lists your organization's sign-in connection and when you last used it.
- If you have no CivAll password, the Password card is hidden. You can still add passkeys.
- Multi-factor authentication for single sign-on is normally handled by your organization's identity provider. CivAll asks for a passkey as well only if your organization has set it up that way.
If your organization requires single sign-on
Your organization can make single sign-on required. When it does, signing in with a password, passkey, or email code is turned away. You see: "Your organization requires single sign-on. Use the single sign-on option on the login page." Click Continue with single sign-on to sign in the right way.
A few people can keep using their other sign-in methods:
- The organization's Account Owner.
- Anyone the Account Owner has marked Exempt from required single sign-on.
If you were already signed in another way when single sign-on became required, you can stay signed in for up to 24 hours. After that, sign in again with single sign-on.