Signing in and security
You can sign in to WorkSnap with an email address and a password, with your Google account, or with either. Which one you use decides who checks it’s really you — and that has a few consequences the sign-in screen doesn’t show. Everything here is in Settings → Profile.
A password, Google, or both
- Signed up with a password. You can also use Sign in with Google later, as long as the Google account has the same email address and you have confirmed that address in WorkSnap. From then on both ways lead to the same account and the same data.
- Signed up with Google. The account has no password at first, so Google is the only way in until you set one (see below).
Either way, you stay signed in on that device until you sign out, or until you haven’t used WorkSnap there for 90 days. After several failed password attempts, sign-in pauses for a few minutes and then works again.
Two-factor codes
Two-factor authentication adds a second step to password sign-ins: after the password, WorkSnap asks for a six-digit code from an authenticator app on your phone. It’s optional. To turn it on, open Settings → Profile, find Authenticator app and choose Set up, then scan the code with the app.
Setting it up also gives you a list of recovery codes. Each one works once, in place of a code from the app — for the day your phone is lost or replaced. Keep them somewhere other than that phone. Regenerate recovery codes in the same place gives you a fresh list and cancels the old one.
Signing in with Google never asks for these codes. Google checks it’s you instead, with its own protection — including Google’s 2-Step Verification, if you have it on. So if you use both ways in, two-factor codes protect only the password one, and your Google account’s security protects the other.
Setting a password on a Google account
An account created with Google shows Set a password in Settings → Profile instead of the password fields. Email me a link sends a link to your address, and you choose the password on the page it opens — the same page as for a forgotten password.
It goes through your inbox on purpose: someone who got hold of a signed-in browser shouldn’t be able to add a permanent way into your account without also having your email. Once the password is set, you can sign in either way, change your email address, and turn on two-factor codes for password sign-ins.
Changing your name or email address
Your name changes as soon as you save it. Your email address doesn’t, because it is how you get back into the account if anything goes wrong:
- the new address gets a link, and the change takes effect only when you open it;
- the old address gets a message about it, with a link to cancel the change if it wasn’t you. Use it straight away, while signed in: it works only until the new address is confirmed.
Saving a new address asks for your current password. An account that signs in only with Google has no password to give, so its email field is locked until you set one.
A forgotten password
On the sign-in page, choose Forgot password? and enter your email address. The link that arrives lets you choose a new password. If the account also signs in with Google, that keeps working in the meantime.
Setting a new password — from that link, or by changing it in your profile — signs you out on your other devices. It’s the way to do that if you think someone else has been using your account.
With two-factor codes on, a new password doesn’t skip the code: a password sign-in still needs the authenticator app or a recovery code. That’s why the recovery codes matter — keep them where you’ll find them without your phone.
How WorkSnap protects the account beyond signing in is on the security page.