Sign in and multi-factor authentication

Each organization has its own sign-in page at its Tradecraft address. Your admin’s invitation or your sign-up confirmation takes you there.

Multi-factor authentication is required

Every Tradecraft password login uses multi-factor authentication (MFA) with an authenticator app (TOTP), such as Microsoft Authenticator, Google Authenticator or 1Password.

The first time you sign in:

1. Enter your email and password.
2. Scan the QR code with your authenticator app, or type the key shown under it.
3. Enter the 6-digit code from the app and select Verify and continue.
4. Save your recovery codes. You get 10 one-time codes. Store them somewhere safe, such as your password manager.

After that, each sign-in asks for your password and a code from the app.

Lost your phone?

Enter one of your recovery codes instead of an app code. Each code works once. If you have none left, ask your organization’s admin or contact support.

Lockouts

To protect your account, Tradecraft locks sign-in for 15 minutes after:

• 5 wrong passwords within 15 minutes, or
• 5 wrong authenticator codes within 5 minutes.

Single sign-on

If your organization uses single sign-on, sign in with your company identity provider instead. Your identity provider then handles MFA. See Single sign-on.

Forgot your password

Use Forgot password on the sign-in page. Tradecraft emails a reset link; after resetting, it lists the organizations you can sign in to.