How you sign in to JobPuul and how to keep your account safe: passkeys, your password, connected accounts, two-factor authentication, and the devices you are signed in on.
Where the settings are
Everything here is under Workspace → Security. Open the menu with your initial at the top of any page and choose Security. On a phone, tap Me, then Security.
Add a passkey
A passkey signs you in with your device's fingerprint, face or PIN — Face ID, Touch ID, Windows Hello or your phone — with no password and no code to type. It is the easiest and safest way in.
- Sign in, and open Workspace → Security.
- In the Passkeys section at the top, choose Set up a passkey. If you already have one, the button says Add another passkey.
- Your device asks you to confirm with your fingerprint, face or PIN. Follow its prompt.
- The passkey appears in the list, marked Synced across your devices or This device. Choose Rename to name it after the device or password manager that holds it.
If you are asked to sign in again first, that is expected: adding or removing a passkey needs a sign-in from the last hour. If you already have a passkey or two-factor authentication, that sign-in must use your passkey or your authenticator code. Choose Sign in again, then repeat the steps.
A passkey always asks your device for its PIN, fingerprint or face. To remove one, choose Remove next to it; it then stops working on all your devices.
Sign in with a passkey
On the sign-in page, choose Sign in with a passkey and confirm on your device. Your browser may also offer a saved passkey when you click the email field. A passkey sign-in does not ask for a two-factor code.
Your password
Forgot your password? Use "Forgot your password?" on the sign-in page and we email a link to the address you sign in with. The link works once and for an hour. Setting a new password signs you out on every device, so anyone who had your old password is signed out too. We give the same answer whether or not an account uses the address you typed, so the page cannot be used to find out who has an account.
Changing your password is under Workspace → Security, if you sign in with a password. It asks for your current one, and signs out every other device. A password needs at least 8 characters, and we refuse one that has appeared in a known data breach.
If you only sign in with a passkey or a connected account, there is no password to change. To add one, choose Set a password by email under Sign-in methods; it sends you the same reset link.
Connected sign-in methods
Sign-in methods lists every way into your account: email and password, passkeys, and the services you can sign in with — Google, Apple, Microsoft and GitHub, where the sign-in page offers a button for them. To add one, choose Connect with its name, such as Connect Google. It must use the same email address as your account. Remove takes a method away again.
If you sign in with a service whose address already has an account here, the sign-in page may ask you to sign in the way you usually do first, and then connect the service from Security.
You always keep one way to sign in
A password, a connected account or a passkey each counts. You can remove any of them while you have another, but the last one stays. A passkey added before every passkey had to ask for your PIN or biometric counts once you have signed in with it. If you lose every way in, "Forgot your password?" on the sign-in page emails you a link to set a new password.
Two-factor authentication
Two-factor authentication (2FA) asks for a 6-digit code from an authenticator app each time you sign in with your password or a connected account.
- Under Two-factor authentication (2FA), confirm your password if asked, and choose Enable two-factor.
- Scan the QR code with your authenticator app, or choose Can't scan? Enter the key manually.
- Save your backup codes somewhere other than your phone. Each works once, and they are not shown again.
- Enter the code from the app and choose Verify & enable.
When the codes run out or go missing, choose Generate new backup codes; the old ones stop working straight away. Disable two-factor turns it off.
Where you are signed in
Where you're signed in lists each device by its browser and system, when it was last active, and which one you are using now. Sign out any you do not recognise, one at a time or with Sign out all other devices, and then change your password.
Security emails
We email your account's address when it is signed in to from a combination of browser, system and network it has not used in the last 90 days, and when its password changes, two-factor authentication is turned off, a passkey is added or removed, or a sign-in method is connected or removed. You cannot switch these off: they are how you hear about someone else in your account.
If one describes something you did not do, open Workspace → Security straight away, sign out every device you do not recognise, remove any sign-in method or passkey you did not add, and change your password. If the email is about your password and you did not change it, use "Forgot your password?" on the sign-in page.
If you lose your authenticator app
Two-factor authentication asks for a code from your authenticator app each time you sign in. If the phone is gone, there are three ways back in, quickest first:
- Sign in with a passkey, if you have one on any of your devices. A passkey does not ask for a code.
- Use a backup code — "Use a backup code instead" on the code screen. Each one works once.
- Restore the app from its backup. Most authenticator apps sync their codes to a new phone.
Once you are in, turn two-factor off and on again from Workspace → Security, or generate new backup codes there, and keep them somewhere other than your phone.
If none of those works, write to us through the Contact link in the footer from the email address on your account. We will reply to that address, and ask for one detail only the account's owner would know — roughly when you joined, a company you belong to, or how you usually sign in. Once that checks out we turn two-factor off, and you sign in with your password or a connected account and set it up again. We never do this on the strength of a phone call, a different email address, or a request made for someone else.
Changing your email address and the emails we send you are covered in Notifications and email.