Sign in and stay signed in

There are two ways in: an email address and a password, or a one-time link sent to your address. Both end in the same account — see Create an account if you do not have one yet.

With a password

A password is at least eight characters. There is no other rule about what it must contain, because a rule that forces a symbol into the middle of a long passphrase makes it harder to remember without making it harder to guess.

Forgotten it? Choose Forgot password? on the sign-in screen and you are sent a link to choose a new one.

With a magic link

Choose Email me a sign-in link and open the link within ten minutes. After that it expires and you ask for a new one.

Open it in the browser you asked from. The sign-in uses PKCE: the browser that requests the link keeps a secret that is needed to finish the exchange, and only that browser has it. A link opened on your phone after being requested on your laptop will not complete, and the error will not make the reason obvious.

What keeps you signed in

Your session is stored by the browser and refreshed in the background. The short-lived token it runs on lasts an hour and is renewed before it expires, so a long gap between visits is not a problem — you stay signed in until you sign out, clear the browser’s site data, or end the session from elsewhere.

Inside Nova the same thing happens in Nova’s own browser session, so signing in once survives a relaunch.

Sessions are per browser, not per account. A second browser, a private window and another machine each have their own, which is why signing out on one leaves the others alone.

If two-factor is on

After the password you get a screen asking for the six-digit code from your authenticator app, or for a recovery code. See Turn on two-factor authentication.

Signing out everywhere else

The account page has Sign out other sessions. It ends every session except the one you are using, which is what you want after signing in on a machine that is not yours. Pairing a device is a separate thing — see Paired devices.

Signing in with Google

Not available. The button appears only where Google credentials are configured, and none are, so use a password or a magic link.

If none of this gets you in, I cannot sign in covers the rest.