Skip to main content
Company admins can require a second step for email and password sign-ins. After entering their password, the member enters a 6-digit code that Artie emails them, and only then are they signed in. It only applies to email and password sign-ins. Google, SSO, and magic link sign-ins are unaffected, and so are API keys.

​
Turn on email login codes

You must be a company admin.
  1. Go to Settings > General.
  2. Turn on Require email code for password login.
The setting saves as soon as you switch it. Nobody is signed out: each member is asked for a code the next time they sign in with their email and password. If a member belongs to more than one company, they need a code whenever any of their companies has the setting on.

​
Signing in with a code

  1. The member signs in with their email and password as usual.
  2. Artie emails a 6-digit code to their account’s email address. The code is also at the start of the subject line, so it shows in the notification.
  3. On the Check your email screen, they enter the code or paste it in. They can also click Sign in in the email instead.
The Sign in button only works in the same browser where the member entered their password. Opened in a different browser, it shows the code so they can type it into the original one.

​
Remember this device

The Remember this device for 30 days box lets a member skip the code in that browser for 30 days. It is checked by default when entering the code by hand. Signing in with the email’s Sign in button never remembers the browser, because the member doesn’t see the box first.

​
Code rules

​
Advanced

Changing or resetting a password cancels any sign-in that is waiting for a code and forgets every remembered browser for that account. The next email and password sign-in asks for a new code.
If a previous email to a member’s address bounced, Artie can’t send them a code and shows a message asking them to contact support. They can still sign in with Google or SSO if your company allows it.