# Sign in

> You sign in with e-mail and password, with a passkey or through Google or Microsoft, and get back into the dashboard after a forgotten password or a lockout.

https://scoco.ai/en/docs/sign-in/

You open the dashboard at app.scoco.ai. Without a sign-in you land on the **Welcome back** page. By the end you will know which ways lead into the dashboard, what happens at the second step, and how to get back in when your password is gone or sign-in is locked. Setting up your password, two-factor confirmation and passkeys is covered in [Your sign-in](https://scoco.ai/en/docs/security/).

## With e-mail and password

1. Open app.scoco.ai.
2. Enter your **E-mail** and your **Password**. Upper and lower case in the address make no difference.
3. Click **Sign in**.

If you have set up a second factor, scoco asks for it now. Otherwise you are signed in. If you were opening a particular page, you go straight there, otherwise to the **Overview**.

## The second step

After the password, **Two-factor confirmation** appears. You have five minutes for this step.

- **Authenticator app:** enter the 6-digit code from the app and click **Confirm**.
- **Passkey:** click **Use a passkey instead**, then **Confirm with a passkey**. If you have only a passkey and no app, the step opens on **Confirm with a passkey** straight away. If your browser does not support passkeys, it opens on the **Recovery code** field instead.
- **Recovery code:** click **Trouble? Use a recovery code**. Each code works once. When you use one, we send you an e-mail.

**Sign in again** takes you back to the password. You set up the second factor under [Two-factor confirmation with an app](https://scoco.ai/en/docs/security/#two-factor).

## Sign in with a passkey

**Sign in with a passkey**, above the form, signs you in with no e-mail and no password. Your browser asks for Face ID, your fingerprint or your device PIN. A passkey stands in for both steps, so scoco does not ask for a code afterwards.

The button only appears when your browser supports passkeys. If you cancel the browser's prompt, nothing happens and you can try again. You add a passkey under [Passkeys](https://scoco.ai/en/docs/security/#passkeys).

## With Google or Microsoft

When sign-in through Google or Microsoft is available, there is one button per provider above the form. You sign in with your provider and come back signed in.

- If the Google or Microsoft account has the same e-mail address as your scoco login, scoco links the two the first time. We send you an e-mail about it.
- If your provider cannot confirm that the address is yours, we send a 6-digit code to that address. This is only needed the first time. The code is valid for 15 minutes. **Send the code again** requests a new one. We send up to five codes an hour.
- Google or Microsoft only replace the password. If you have a second factor, scoco asks for it as above.

You manage linked providers under [Google or Microsoft](https://scoco.ai/en/docs/security/#google-microsoft).

## Forgot your password

1. On the sign-in page, click **Forgot your password?**.
2. Enter your **E-mail** and click **Request a link**.
3. Open the link in our e-mail. It is valid for 60 minutes and works once.
4. Enter a **New password** and **Repeat password**, at least 10 characters.
5. Click **Save password**.
6. Sign in with the new password.

The new password ends every earlier sign-in, on every device. A lockout after failed attempts is lifted at once. Your second factor stays as it is.

The page gives the same answer whether the address exists or not. If you have only ever signed in with Google or Microsoft, the same link sets your first password.

## Locked after failed attempts

After five wrong passwords in a row, sign-in for your account is locked for 15 minutes. You then see **Too many failed attempts. Please try again in 15 minutes, or reset your password.** Wait, or reset your password with **Forgot your password?**. That lifts the lock at once.

If more than about ten sign-in steps come from your internet connection in quick succession (from an office with several people, say), you see **Too many attempts. Please wait a moment.** instead. Then it usually works again after a minute, and your account is not locked.

## Lost your second factor

If the phone with the authenticator app or the passkey is gone, this is how you get back into your account:

1. **With a recovery code.** In the second step, click **Trouble? Use a recovery code**. Afterwards, set up a new second factor under **Settings › Security** or generate new codes.
2. **Through your team.** If you have no code left, ask the owner or an admin of your team. They open **Settings › Team**, choose **Reset second factor** in your row's menu and confirm with **Reset**.
3. **Through scoco support.** If nobody in your account can help, for example because you are the only owner, write to our support. The address is in every e-mail from scoco. We first check that the request really comes from you, above all with a call back on a number your assistant forwards to. You then get an e-mail with the time: 24 hours later your second factor is reset. If you sign in again with your second factor before then, the reset is called off and you get an e-mail about it. The wait protects you from someone else talking support into it.

This removes your authenticator app, your passkeys and your recovery codes, and ends all your sign-ins. You get an e-mail about it. Your password and signing in with Google or Microsoft stay. Sign in with them afterwards. If your account requires two-factor confirmation, you set up a new second factor first.

The owner resets anyone, an admin anyone except an owner. Nobody resets their own second factor this way. Whoever resets must have signed in within the last 15 minutes. Otherwise scoco asks them to sign in again first.

For an owner, only another owner can do this. If you are the only owner, the way through support with its wait remains. It is faster with a second owner, or with recovery codes you keep somewhere other than your phone.

## How long you stay signed in

A sign-in lasts 7 days on that device, even if you use the dashboard every day. After that you sign in again. It ends sooner when

- you sign out with **Sign out** in the account menu,
- you reset your password, or change it on another device,
- you sign the device out under [Sign out devices](https://scoco.ai/en/docs/security/#sessions),
- your access is deactivated by your team.

If the sign-in ends while you are working, you come to the sign-in page. Once you sign in, you continue on the page you were on.

## Signing in for the first time

**You were invited to a team.** Your first sign-in is the link in the invitation: there you set your password and click **Activate account**. The steps are under [What the invited person does](https://scoco.ai/en/docs/invite-team/#accept). Until then you have no password, and **Forgot your password?** sends you no link. Ask for a new invitation instead. If the sign-in page offers Google or Microsoft and your account there has the invited address, you can accept the invitation with it too.

**You created the account yourself.** Confirm your e-mail address first. If you sign in before that, you see **Please confirm your e-mail address first.** With **Enter the code** you enter the 6-digit code from our e-mail. See [Create your account](https://scoco.ai/en/docs/quickstart/#create-account).

**Your team requires a second factor.** If you do not have one yet, you see **Two-factor confirmation required** after signing in. Set up an authenticator app with **Set it up now** or, if your browser supports it, a passkey with **Set up a passkey instead**. Only then does the dashboard open. Who decides this is covered in [Two-factor confirmation for everyone](https://scoco.ai/en/docs/roles-and-permissions/#two-factor).

## Common problems

**That e-mail or password is not right.** Check the address and the password. The same message appears when your access has been deactivated. In that case, ask the owner or an admin of your team. Otherwise, **Forgot your password?** helps. If you have only ever signed in with Google or Microsoft, use your provider's button.

**The code from the app is rejected.** Set your phone's clock to automatic. The app works from the time of day, and scoco only accepts codes from a short time window. If the password step was more than five minutes ago, you see **Your sign-in has expired. Please sign in again.** Click **Sign in again**.

**You have lost the phone with the app.** Use **Trouble? Use a recovery code**. If you have a passkey, **Use a passkey instead** works too. Without either, the owner or an admin can reset your second factor, see [Lost your second factor](https://scoco.ai/en/docs/sign-in/#lost-second-factor). Keep your recovery codes somewhere other than your phone.

**Signing in with the passkey did not work. Try again or sign in with your password.** Try again, or sign in with e-mail and password. A passkey you removed under **Settings › Security** may still be offered by your device, but it no longer works.

**Sign-in was cancelled.** You cancelled at Google or Microsoft. Try again.

**There is no scoco account for this e-mail address yet.** There is no scoco login for the address of your Google or Microsoft account. If you have one under a different address, sign in with it and link the provider afterwards.

**Your provider did not share an e-mail address with us. Sign in with e-mail and password — you can then link the provider under Settings → Security.** Do what the message says.

**An account was started for this address but never confirmed. Use “Forgot your password?” to set your own password and confirm the address in one step.** Set a password with **Forgot your password?**. The link confirms your address as well.

**That link is invalid or has expired.** The link is older than 60 minutes, has been used, or you have requested a newer link since. Only the newest one works. Request a new one with **Request a new link →**.

**The e-mail with the link does not arrive.** Check your spam folder. After three links in quick succession, we send the next one only after about 20 minutes. The page still says it is on its way.

_Last checked: 26 October 2026_