Signing in, two-step login and forgotten passwords

If you signed up yourself, activate your account first: we emailed you a link (check spam if you don't see it). Until you click it, signing in says Please activate your account first and offers Send the activation email again. The link works once and lasts five days.

For your security you are signed out automatically after 2 hours of not using the app. Two minutes before, a notice offers Stay signed in; if you're away the page signs you out and the sign-in page says why. Just sign in again — nothing you saved is lost. Any activity (clicking, typing, scrolling, opening a page) starts the 2 hours again, in any tab.

You sign in with your email and password. If two-step login is on for your account, FleetCommander then asks for a 6-digit code from an app on your phone. Even someone who learns your password can't get in without your phone.

Turn on two-step login

1. 1Install an authenticator app on your phone — Google Authenticator, Microsoft Authenticator, Authy or 1Password all work.
2. 2Open My account and press Set up two-step login in the Two-step login section.
3. 3In the app choose Add account and scan the QR code (or type the key shown under it).
4. 4Type the 6-digit code the app shows and press Turn on two-step login.
5. 5Save your ten backup codes (copy, download or print them). They are shown only once.

Signing in with it

• Enter your email and password, then the 6-digit code from your app. A code changes every 30 seconds and works once.
• No phone? Enter one of your backup codes instead (like K7MQ2-XW9PD). Each works once. When few are left, make new ones on My account.
• Too many wrong codes or passwords in a row locks sign-in for that account for about 15 minutes.

Lost your phone

• Sign in with a backup code, then set up a new phone: turn two-step login off and on again (Super Admins: ask another Super Admin).
• No backup codes either? An administrator opens Settings › Users, edits your user and presses Reset two-step login. You are signed out everywhere and can set it up again. (If the only Super Admin is locked out, the person running the server can reset it from the command line.)

Forgot your password

1. 1On the sign-in page press Forgot your password? and enter your email.
2. 2Open the email and press Choose a new password. The link works once and expires after one hour.
3. 3Choose a new password (at least 10 characters with a letter and a number). You are signed out everywhere and sign in again.

• The page answers the same way whether or not an account exists for the email, so nobody can use it to find out who has one. No email after a few minutes? Check spam, or ask an administrator to set a new password for you.
• A password reset does not switch off two-step login — you still need your code.
• You get an email whenever your password is changed. If it wasn't you, tell your administrator straight away.