Account and sign-in statuses

What each status of a person's account, their two-step sign-in, their devices and their sign-in links means.

ReferenceUpdated

The statuses you see on My account, in Team and roles and in Settings → Sign-in security.

A person's account

Status Meaning What changes it
Invited The invitation was sent and not accepted yet. The person cannot sign in. The person presses Join the team on the invitation page, or resets a password with the link.
Active The person can sign in and work, within their role. Accepting the invitation; enabling a disabled person.
Disabled The person cannot sign in and is signed out everywhere. Their work stays in the records. The owner disables them in Team and roles.

Two-step sign-in

Status Meaning
On A code from the authenticator app is asked at each sign-in, unless the device is remembered.
Required The agency or the platform requires it. The person sets it up at the next sign-in and cannot turn it off.
Off Only the password protects the account.

Devices and sessions

Label Meaning
This device The browser or phone you are using now, in Remembered devices and Where you are signed in.
Remembered device A browser that skips the code step for 30 days.
Session One signed-in browser or phone. It lasts 14 days, or until you sign out or the password changes.
Item Works for
Invitation from a colleague 7 days, once
Invitation to a new agency's owner 14 days, once
Password reset link 1 hour, once. A new request replaces the old link.
Code from the authenticator app 30 seconds (the code just before or after is also accepted)
Recovery code Once. 10 are given at a time.
Lock after wrong passwords 10 wrong passwords in 15 minutes stop sign-in for that account for a while
Lock after wrong codes 5 wrong codes in a row stop code checks for 15 minutes

Related articles