Ways to sign in

Creating an account

Choose Create an account on the sign-in page. Enter your name, your email address and a password of at least 8 characters. A passphrase of several words is easier to remember than a short jumble, and works just as well. You are signed in straight away and a personal workspace is created for you.

Formwork also sends a verification email. The link in it works for 7 days. Until you use it, a banner in the sidebar says "Verify your email to secure your account." with a Resend link button. Nothing in Formwork is blocked while an address is unverified.

You can instead choose Continue with KingsChat; see Signing in with KingsChat.

Signing in with a password

On the sign-in page enter your Email and Password, then Sign in. If you have turned on two-factor authentication you are asked for a code next; see Two-factor authentication.

After 8 attempts for the same email address in 15 minutes, sign-in pauses with "Too many attempts. Wait 15 minutes or reset your password." Attempts from one network address are limited separately. Every failed attempt gives the same message, "That email and password do not match", so nobody can use the form to find out which addresses have accounts.

Forgot your password

Choose Forgot password? and enter your email address. The page always answers "If that email has an account, a reset link is on its way", whether or not an account exists. If there is one, the email contains a link that works for one hour. Open it, choose a new password of at least 8 characters, and sign in. Reset emails are limited to three per address per hour.

Resetting a password ends your other signed-in sessions.

An emailed sign-in link

If you would rather not type a password, choose Email me a link instead. Formwork emails a link that works once and expires after 15 minutes. Opening it shows a Confirm sign-in page with a button. The extra step is there because some email programs open every link in a message to check it for viruses, which would use up the link before you could.

Signing in this way also counts as verifying your email address. Up to four links can be requested per address per hour.

Signing out

Use Sign out in the account menu at the bottom of the sidebar.

The Account page

Open Account and security from the same menu. It has sections for Profile (your name), Email, Password, Two-factor authentication, Connected accounts, API keys and Data and privacy.

Changing your email

Enter the New email address and select Send confirmation. If you have a password, you also enter it. A link goes to the new address and works for 24 hours. Opening it shows a confirmation page; your email changes only when you select the button. Formwork then sends a security notice to your old address.

The page gives the same answer whether or not the new address is already in use.

Changing your password

Under Password, enter the current password and a new one, then Change password. When you do:

• this session stays signed in and every other session is signed out;
• your API keys are revoked, because keys made under the old password should not outlive it. You create new ones on the API keys page;
• a security notice is emailed to you.

If you signed up with KingsChat and have no password yet, the same section is headed Set a password. Adding one lets you sign in by email as well.

Security notices

Changes to your password, your email address and two-factor authentication trigger an email to the address on the account, so you find out if someone else did it. The email links to the forgot-password page.