You don't need to be logged in to use anything on this page — it's how you get in. Everything here works the same in the Mobile App; where the app differs, it says so.

Creating an account

  1. On the sign-in page, choose Create an account (on the website, Get started free).
  2. Enter your full name, your work email and a password — at least 10 characters, with upper- and lower-case letters and a number — type the password again, and agree to the Terms of Service and Privacy Policy.
  3. A 6-digit code is emailed to you: enter it to confirm your address (see "Verifying your email" below). On the web you then sign in; the mobile app signs you in straight away.
  4. Choose or create your organization — see Getting Started & Navigation.

If that email already has an account, no second account is created and the password you just typed isn't used — sign in with the existing password, or use Forgot password. Invited to an organization? Set your password from the invitation email rather than creating an account.

Signing in with your email and password

  1. Go to the login page.
  2. Enter your email and password.
  3. Click Sign in.
  4. If you've turned on two-factor authentication (an extra security code), you'll be asked to enter a 6-digit code from your authenticator app next.

Note: after five wrong attempts in a row you'll be locked out for a while — the message tells you how long to wait. This is a normal safety measure, not something wrong with your account.

Signing in with a single sign-on provider (Google, Microsoft, or Apple)

If your company has turned one of these on, the matching button appears on the login page. Click it instead of typing a password — you'll be sent to the provider to confirm it's you, then brought back to BareLedger. In the mobile app the provider opens in a secure browser sheet over the app and closes itself when you're done. If you already have the extra security code turned on, you'll still be asked for it even after signing in this way — that step never gets skipped.

Note: signing in this way only works if the email on your provider account matches an existing BareLedger account (or if it's your very first time, in which case a new account gets created for you). New accounts created through a provider still verify their email with a 6-digit code — see "Verifying your email" below.

Verifying your email

BareLedger confirms your email address with a 6-digit code — there are no verification links.

  1. When you register, a code is emailed to you. Enter it on the verification screen to confirm your address. Codes are valid for 10 minutes; after 5 wrong attempts a code stops working and you'll need a fresh one (use the resend option).
  2. If you sign in before verifying, you won't be blocked — the sign-in screen switches to the code entry itself, a fresh code is emailed to you automatically, and entering it verifies you and signs you in in one go.
  3. Accounts created through a single sign-on provider (Google, Microsoft, or Apple) verify this same way — signing in through a provider doesn't confirm your email by itself, so a first-time user also receives a code.
  4. Resetting your password does not verify your email. If your address was never confirmed, you'll still go through the code step at your next sign-in.

Forgot your password

  1. On the login page, click Forgot password.
  2. Enter your email and submit. If an account exists for that email, you'll get a reset link — you'll see the same confirmation message either way, so no one can use this to guess whether an email is registered.
  3. Open the link, choose a new password, and log back in.

In the mobile app, tap Forgot password? on the sign-in screen. The link opens in a browser — on your phone or any computer — where you set the new password; then sign in to the app with it.

Setting up the extra security code (two-factor authentication)

  1. Go to your User Profile, find the security section, and choose Enable Two-Factor Authentication.
  2. Scan the QR code shown on screen using an authenticator app on your phone (Google Authenticator and Authy are common choices).
  3. Type in the 6-digit code the app gives you, to confirm it's set up correctly.
  4. You'll be given a list of one-time backup codes — write these down and keep them somewhere safe. Each one can be used once if you ever lose access to your authenticator app, and BareLedger won't show them to you again.

To turn this feature off, you'll be asked to confirm it's really you first — with your current password, or with a code emailed to you if your account only uses Google sign-in.

Common mix-ups: trying to reuse a code that already worked once, or one that's expired (codes only last 30 seconds, so just wait for a new one); losing both your authenticator app and your backup codes at the same time (there's no self-service fix for that — ask an administrator on your team for help).

Signing out

Click Sign out from your profile menu. This only signs you out on the device you're using. To sign out everywhere else too, use the Sessions section of your User Profile.