# Sign in to Vigilbase One

> Sign in to One through Vigilbase Identity with a password, email link, passkey, Google, Microsoft or company single sign-on, and secure your account.

Source: https://docs.vigilbase.com/one/getting-started/sign-in

Vigilbase One does not keep its own passwords. When you open [one.vigilbase.com](https://one.vigilbase.com), One sends you to Vigilbase Identity at `auth.vigilbase.com`, the shared Vigilbase account service. You sign in there and Identity returns you to One. The same account works across Vigilbase products.

## Sign in

:::steps
1. **Open One.** Go to [one.vigilbase.com](https://one.vigilbase.com). You arrive on the **Sign in** page of Vigilbase Identity.
2. **Enter your email.** Type your email address and click **Continue**. If your company has set up single sign-on for your email domain, Identity redirects you to your company's sign-in page instead.
3. **Finish signing in.** Enter your password and click **Sign in**, or choose **Email me a sign-in link** or **Use a passkey**.
4. **Enter your authentication code** if you have turned on two-factor authentication.
5. **Choose your organisation** if you belong to more than one. See [Organisations](https://docs.vigilbase.com/one/getting-started/organisations).
:::

You can also skip the email step: on the first screen, click **Continue with Google**, **Continue with Microsoft** or **Use a passkey**.

> [!NOTE]
> Every sign-in passes a Cloudflare Turnstile check in the background. You do not normally see it.

## Sign-in methods

| Method | How it works |
| --- | --- |
| Password | Enter the password for your Vigilbase account. Use **Forgot password?** to reset it. |
| Email link | **Email me a sign-in link** sends a one-time link to your inbox. |
| Passkey | **Use a passkey** signs you in with a passkey saved on your device or password manager. Your browser may also offer your passkey as soon as you click the email field. |
| Google or Microsoft | **Continue with Google** or **Continue with Microsoft** uses that account. The email must be verified with the provider. |
| Company single sign-on | Used automatically when your organisation has connected its identity provider for your email domain. See [Single sign-on](https://docs.vigilbase.com/one/getting-started/single-sign-on). |

If your company requires single sign-on for your email domain, other methods are refused for that domain and you always go through your company's sign-in page.

## Create an account

If you are new to Vigilbase, click **Create an account** at the bottom of the **Sign in** page. Enter your email, name and a password, then click **Create account**. Identity emails you a verification link; open it to finish creating your account. If you have an invitation, sign up with the email address the invitation was sent to.

## Turn on two-factor authentication

One shows the banner **Secure your account with two-factor authentication.** until you turn it on. Sessions that use company single sign-on do not show the banner, because your company's sign-in handles it.

:::steps
1. **Open your account security.** Click **Set up MFA** in the banner, or go to **Settings** and click **Manage in Vigilbase Identity**.
2. **Set up your authenticator.** Under **Two-factor authentication**, click **Set up authenticator** and scan the code with your authenticator app, or use **Enter a setup key**.
3. **Save your backup codes.** Store them somewhere safe and click **I’ve saved my codes**.
:::

Once it is on, Identity asks for a code from your authenticator app after every sign-in, including passkey and Google or Microsoft sign-ins.

## Manage your account

Your name, email, password, passkeys, linked Google or Microsoft accounts and sessions are managed in Vigilbase Identity, not in One.

In One, open the user menu at the bottom of the sidebar and click **Settings**. The **Account security** card shows your email, whether two-factor authentication is on, how you signed in this time and when. Click **Manage in Vigilbase Identity** to change anything.

The same page links to **Authorized applications**, where you connect MCP clients and revoke their access. See [Authorized applications](https://docs.vigilbase.com/one/getting-started/authorized-applications).

Your Identity account at [auth.vigilbase.com/account](https://auth.vigilbase.com/account) has four tabs:

| Tab | What you can do |
| --- | --- |
| **Profile** | Change your name, email address and profile picture. |
| **Security** | Change your password, set up two-factor authentication and add or rename passkeys. |
| **Sessions** | See where you are signed in and sign out of other sessions. |
| **Connections** | Link or unlink Google and Microsoft sign-in, and review applications that have access to your account. |

Identity may ask you to confirm it’s you before it lets you change security settings.

## Sign out

Open the user menu at the bottom of the sidebar and click **Sign Out**. This ends your session in One and in Vigilbase Identity.