Sign-in, password and recovery codes

How to sign in, reset a forgotten password, and use your authenticator app and recovery codes, including when you lose your phone.

How to sign in to Needlr, what to do when you forget your password, and how your authenticator app and recovery codes keep your account safe.

Think of your house keys

Your password is your front-door key. Your authenticator app is a second lock that only opens with your phone. Recovery codes are spare keys you hide somewhere safe, in case you lose your phone.

Signing in

1. 1On the sign-in page, fill in Work email and Password.
2. 2On your own computer, tick Remember me for 30 days. On a shared computer, leave it empty.
3. 3Press Continue.
4. 4If Needlr shows Two-factor check, type the 6 digits from your authenticator app. It checks them by itself.

Without Remember me, Needlr signs you out after 12 hours without activity, and after 7 days at most. With it, you stay signed in for up to 30 days, as long as you come back at least every 14 days.

New here? Press Create an account (your first 10 minutes). Confirm your email before you sign in: the link in the email works for 24 hours. If you sign in before confirming, Needlr sends you a new link.

If you forgot your password

1. 1On the sign-in page, press Forgot password?
2. 2Type the email you sign in with, and press Send reset link.
3. 3Open the email Reset your Needlr password and press Choose a new password. The link works once, for 30 minutes.
4. 4Fill in New password (at least 12 characters) and Repeat password, then press Save new password.
5. 5Sign in with your new password.

Saving a new password signs you out on every other computer and phone. That's on purpose: if someone else knew your old password, they're out too.

Your authenticator code

An authenticator app on your phone, like 1Password, Google Authenticator or Authy, shows a new 6-digit code every 30 seconds. Needlr asks for one before any change to your live site, and it may ask for one when you sign in. One code covers the next 20 minutes (why).

You don't need to set it up ahead of time. The first time Needlr needs a code, it sets up the app with you: scan the square, type the 6 digits, and save your recovery codes.

Recovery codes

• You get 10 recovery codes when you set up your authenticator app. They look like k7qm-2xza-p4tn.
• Each code works once, in place of a code from the app.
• Needlr shows them only once. Copy them and keep them in your password manager, next to your Needlr password.
• Using one also counts as your code for the next 20 minutes.

If you lose your phone

1. 1When Needlr asks for your code, before a change to your live site or at sign-in, press Lost your phone? Use a recovery code.
2. 2Type one of your recovery codes and press the button below it (Verify at sign-in).
3. 3Needlr shows Recovery code accepted. Cross that code off your list: it won't work again.
4. 4Press Set up a new authenticator, scan the square with the app on your new phone, and type the 6 digits. Your old app and old recovery codes stop working, and Needlr shows you 10 new codes to save.

Not ready to set up the new phone? Press Not now. You can set it up any time within 20 minutes of using a recovery code, so the next recovery code you use offers it again.

Lost your recovery codes too, or can't find a place to type one? Write to [email protected] from your account's email address.

Signing out

Press the sign-out button next to your email, at the bottom of the side menu. Signing out also ends your 20 minutes, so the next live change asks for a code again.

Common mistakes

• Using an old reset link. Each link works once, for 30 minutes. If you see Link not valid, press Send a new link.
• Too many tries. After several wrong passwords or codes, Needlr says Too many attempts. Wait a few minutes and try again. That stops people from guessing.
• Keeping recovery codes only on your phone. If you lose the phone, you lose them too.
• Ticking Remember me on a shared computer. The next person could open your account.