insideDM

Sign in safely and protect your account

3 min readUpdated 9 Oct 2026

In short

Sign in with your email and password, a code sent to your phone, or Google or Facebook. Then set up security codes in Settings & team › Security — after that, nobody can change your plan, team or connections, issue a refund or delete your account without a six-digit code sent to your WhatsApp or email.

Where it isSet upSettings & teamSecurity

Ways to sign in

On the sign-in page you can use:

  • Email — your email address and password. Forgot it? Choose Forgot your password?, then Send the link. The link lets you set a new one and signs you in.
  • Phone — pick your country, enter your number and choose Send code. Type the six-digit code we send you, then Verify & continue.
  • Continue with Google or Continue with Facebook.

Set up security codes first

Security codes are six-digit codes we send before the changes that matter most. They’re never asked just to sign in.

  1. Go to Set up › Settings & team and open the Security tab.
  2. Under Sign-in and verification, find Security codes and choose Set up.
  3. Choose WhatsApp and enter an Indian mobile number (+91) that has WhatsApp — or choose Email to use the address you sign in with.
  4. Choose Send code, type the six-digit code (it works for five minutes) and choose Verify.

The first time, we ask for your password: choose Sign in again, and you’ll come straight back to finish.

To send codes somewhere else later, choose Change next to Codes on WhatsApp or Codes by email. We confirm it’s you with a code to the old one first.

When we ask for a code

A Confirm it’s you window opens before you:

  • change your plan, pay a renewal or add money to your wallet
  • issue a refund or erase a customer
  • change roles or who runs the workspace, or the workspace sign-in rule
  • change a connection, or where alerts go
  • create, show or remove the keys that connect your own software (the Developer tab)
  • sign out one other session or every session, change where your codes go, or delete your account

Each code works for one action. If a WhatsApp code doesn’t arrive — or you’ve lost your phone — choose Send by email instead.

See where you’re signed in

The Security tab lists every browser and phone signed in to your account under Where you’re signed in.

  • Sign out all other sessions keeps you signed in here and signs out everywhere else.
  • Sign out everywhere signs you out on every device, this one too. We ask for a code first.

Recent security activity shows sign-ins, sign-outs and security codes on your account for 400 days. We also email security notices to your account email.

Give each teammate their own login

Never share one login. Invite each person from Settings & team › Team & roles and give them a role:

  • Admin can do everything.
  • Manager runs the day, but can’t change billing, the team or roles, issue refunds, erase customers, manage developer keys or set the sign-in rule.
  • Viewer can look but not change anything.

Ask your whole team for codes

If you hold the Admin role, the Workspace sign-in rule card on the Security tab sets who must have security codes: Optional, Required for admins or Required for everyone. People who haven’t set them up get a grace period and a Set up security codes banner. Nobody can see or change anyone else’s codes.

If something’s not right

  • “That code didn’t match.” Check the latest message and try again.
  • “That code expired after five minutes.” Choose Resend code or Send a new code.
  • “We couldn’t send the code.” Choose Send by email instead.
  • “Too many attempts.” Wait the time shown, then try again.
  • “Choose where your codes go first.” Choose Set up codes and follow the steps above.