The statuses you see on My account, in Team and roles and in Settings → Sign-in security.
A person's account
| Status |
Meaning |
What changes it |
| Invited |
The invitation was sent and not accepted yet. The person cannot sign in. |
The person presses Join the team on the invitation page, or resets a password with the link. |
| Active |
The person can sign in and work, within their role. |
Accepting the invitation; enabling a disabled person. |
| Disabled |
The person cannot sign in and is signed out everywhere. Their work stays in the records. |
The owner disables them in Team and roles. |
Two-step sign-in
| Status |
Meaning |
| On |
A code from the authenticator app is asked at each sign-in, unless the device is remembered. |
| Required |
The agency or the platform requires it. The person sets it up at the next sign-in and cannot turn it off. |
| Off |
Only the password protects the account. |
Devices and sessions
| Label |
Meaning |
| This device |
The browser or phone you are using now, in Remembered devices and Where you are signed in. |
| Remembered device |
A browser that skips the code step for 30 days. |
| Session |
One signed-in browser or phone. It lasts 14 days, or until you sign out or the password changes. |
How long links and codes work
| Item |
Works for |
| Invitation from a colleague |
7 days, once |
| Invitation to a new agency's owner |
14 days, once |
| Password reset link |
1 hour, once. A new request replaces the old link. |
| Code from the authenticator app |
30 seconds (the code just before or after is also accepted) |
| Recovery code |
Once. 10 are given at a time. |
| Lock after wrong passwords |
10 wrong passwords in 15 minutes stop sign-in for that account for a while |
| Lock after wrong codes |
5 wrong codes in a row stop code checks for 15 minutes |