For everyone

Signing in and staying safe

Sign in with your password, Google, or Microsoft. Use an email code if you forget your password.

Sign in with your account email and your password. Forgot it? Pick the email code option on the same page. After the code, you can set a new password, or do it later in Account settings, after a short security check. A new password needs at least 12 characters. A short sentence you will remember works best. A bar shows Too short (under 12), Good (12 to 15), or Strong (16 or more). We turn down passwords that showed up in data leaks.

Want one tap? Pick Sign in with Google or Sign in with Microsoft. If that email is the same as your Lerabase email, it just works. If not, sign in once with your password. Then open Account settings and pick Connect Google or Connect Microsoft. Picked the wrong one? Choose Remove there. A Google or Microsoft account with no Lerabase account goes on to Join.

After many wrong tries, sign in stops for a few minutes. We never lock your account for wrong passwords, so no one can lock you out on purpose. Every 30 days we text your phone a code to check it is still you.

Lerabase staff, and team members who can open workers' documents, use Two-step login. First the password, then a code from a free authenticator app, like Google Authenticator. Team members who open documents may use Google or Microsoft instead. We ask for the second step again after 12 hours.

Lost your phone? After your password, the phone check page and the Two-step login page both have a Lost your phone? link. It starts account recovery. A person checks that it is you, then resets it. Add a spare phone in Account settings to skip the wait.

You stay signed in on a device until you sign out, or for 30 days after you last used Lerabase there. On a phone or computer that is not yours, tick This is not my device on Sign in, before your password or Google or Microsoft. We sign you out when you close the browser.

Think someone else used your account? Open Account settings and pick Sign out of all devices. Then set a new password. We email you when your password, email, phone, Google or Microsoft sign in, or authenticator app changes. These emails cannot be turned off. If it was not you, press This was not me in the email, then Secure my account. You do not need to sign in. We sign you out on every device and lock the account, so nobody can use it, you included, until a person checks it is you and helps you back in. We never use security questions.