Account access and two-step verification

This guide explains how to enter Winglo and protect your account. Use the email address that received your invitation or access approval.

Sign in#

The sign-in screen can offer:

• A magic link sent to your email
• Email and password
• Continue with Google

The choices shown depend on the Winglo environment. If a choice is not shown, it is not configured there.

A magic link is the main recovery path when you forget your password. Enter your email, request the link, then open the newest message. Older links may no longer work.

Accept an invitation#

Open the invitation link sent to your email. The link is meant for that address, so do not forward it.

Follow the screen to verify access and set a password when requested. If the invitation signs you in without creating a password, you can set one later in Settings → Security.

An invitation can expire or be withdrawn. Ask a workspace owner or admin to send a new invitation if the link no longer works.

Finish a two-step verification challenge#

When two-step verification is active, Winglo asks for the six-digit code from your authenticator app after the first sign-in step.

Use the current code. Authenticator codes change often. If every code fails, set your device date and time to update automatically, then try again.

Set up two-step verification#

1. Open Settings → Security.
2. Find the two-step verification section.
3. Enter your password when requested.
4. Choose Set up 2FA.
5. Scan the QR code with an authenticator app, or enter the setup key.
6. Enter the current six-digit code to confirm.
7. Store the recovery codes in a safe place.

Recovery codes are shown once. Each code works once. Keep them outside the device that holds your authenticator app.

Disable two-step verification#

Open Settings → Security and choose the disable action. Enter your password and confirm.

Disabling this protection makes the account less secure. Do it only when required, then set it up again as soon as practical.

Sign out other sessions#

Use the session control in Settings → Security to sign out other devices. This is useful after losing a device or using a shared computer.

Also change your password and review connected sign-in methods if you suspect unauthorized access.

Safe access rules#

• Never share a magic link, password, authenticator code, or recovery code.
• Do not approve an unexpected sign-in prompt.
• Use a password manager for a unique password.
• Report unexpected access to your workspace administrator.