Sign in & security

Activate your account

When CreditCore creates your account, you receive a confirmation email.

1. Open the link in the email. It takes you to Confirm your account (/account/confirm).
2. Enter the name of the admin user and a password.
3. You’ll see “Account confirmed successfully, now you can login with your credentials” and be redirected to the login page.

If the link has expired you’ll see “The confirmation link is invalid or has expired”. Ask CreditCore to send a new one.

Invited users

Users created by an admin (see Users) receive an invitation email. The link opens Create user password (/user/confirm), where they choose their password and can then log in.

Log in

Go to creditcore.io/login, enter your email and password and press Sign In.

• If your user has two-factor authentication enabled, you’re asked for a code (see below).
• After signing in you’re taken to the page you originally requested, or to the dashboard.
• Signing in or out in one browser tab applies to all your open tabs.

Note

Your session is kept in a secure cookie and renewed automatically while you use the platform. If it can’t be renewed you’re sent back to the login page.

Two-factor authentication (2FA)

CreditCore supports time-based codes from an authenticator app such as Google Authenticator, Microsoft Authenticator or 1Password.

Enable 2FA

1. Open the profile menu at the bottom of the sidebar and choose Google 2FA.
2. Click Generate QR Code and scan it with your authenticator app.
3. Enter the 6-digit code shown in the app and click Enable 2FA.
4. Five recovery codes appear. Save them in a safe place: each one lets you sign in once if you lose your phone.

To move 2FA to a new phone, open Google 2FA again and click Renew 2FA. This disables the current configuration and shows a new QR code.

Sign in with 2FA

After your password, enter the 6-digit code from your app and click Verify & Sign In. You have 5 minutes to enter it; after that you need to log in again. Codes change every 30 seconds: if one is rejected, wait for the next one.

Use a recovery code

On the code screen, click Use a recovery code and enter one of your codes (format XXXX-XXXX).

Caution

Each recovery code works only once. After using one, generate new codes from Google 2FA → Renew 2FA. If you’ve lost both your phone and your codes, ask your administrator to reset your 2FA.

Forgot your password

1. On the login page, click Forgot your password?
2. Enter your email and click Send. You receive an email with a reset link, valid for 10 minutes.
3. Open the link, enter the new password twice and save. You’ll see “Your password has been changed”.

If the link is no longer valid you’ll see “Your token is invalid”: request a new one.

Change your password

Open My Profile from the profile menu. In the Password tab enter your old password, the new password and repeat it, then click Save.

Log out

Profile menu → Logout, then confirm.