Browse help

Signing in and two-factor authentication

Signing in to the client portal, how long you stay signed in, unlocking after a reload, and adding an authenticator app with backup codes.

Built PIToolkit isn't open yet. This describes the product as it's built today, and details may change before launch.

Last reviewed

On this page
  1. Signing in
  2. Unlocking after a reload
  3. Two-factor authentication
  4. Your account page
  5. Related articles

Signing in

Sign in on the portal sign-in page with the email address your invitation was sent to and the password you chose.

  • You stay signed in for up to 4 hours without activity, or 24 hours in total, whichever comes first.
  • You can be signed in on up to 3 devices or browsers at once. Signing in on a fourth signs out the oldest, and you’re told so. If that wasn’t you, contact your investigator.
  • After several wrong passwords in a short time, sign-in from your connection pauses for about 15 minutes. Wait, then try again carefully.

Unlocking after a reload

The keys that open your files live only in the browser tab you signed in on. If you reload the page or open the portal in a new tab, you’re still signed in, but you’ll see Unlock private content. Enter your password to open your files again.

Two-factor authentication

Two-factor authentication adds a second step when you sign in, so your password alone isn’t enough. It’s optional, and we recommend it, especially for a sensitive case.

  1. Open Your account and go to Two-factor authentication.
  2. Follow the steps to add an authenticator app, such as Google Authenticator, Microsoft Authenticator or 1Password.
  3. Save your backup codes. You can download them as a file. Each code works once, if you don’t have your app to hand.

Turning it on signs you out on every other device and browser. The one you’re using stays signed in.

If you lose both your authenticator app and your backup codes, you lose access to this account and everything shared with it, permanently. Keep the backup codes somewhere safe and separate from your phone.

Security keys and other sign-in methods are planned and not available yet.

Your account page

Your account is where you manage:

  • Your name: kept encrypted, so you need to have unlocked the tab to see or change it. Each investigator gets a copy after you accept their invitation; changing it here doesn’t update their copy, so tell them if it changes.
  • Your sign-in address: see Changing your sign-in address
  • What you hear about: your notification choices
  • Your safety code: the code your investigator checks with you. See Your safety code and security warnings
  • Two-factor authentication

You can’t change your password from the portal at the moment, and there’s no “forgot password” link. See If you lose access.

More in Account and security

  • If you lose access

    What to do if you forget your portal password, lose your authenticator app, or a case disappears, and why nobody can reset your password.