Account & security
How you sign in to Qalion and how to protect your account.
Sign-in
- Sign in with your username or email and password, or with Sign in with Google or Sign in with Microsoft.
- Email accounts must verify their address first. The verification link is valid for 24 hours.
- If MFA is on, Qalion asks for your code after the password or after Google or Microsoft sign-in.
Passwords and reset
- At least 12 characters, with a lowercase letter, an uppercase letter, a digit and a symbol.
- Passwords that appear in known data breaches are refused.
- Forgot it? Click Forgot password?, then Send reset link. The link is valid for 1 hour.
- To change your password, use the same reset flow.
Multi-factor authentication
1
Open the avatar menu → Account → Multi-factor authentication, and click Start MFA setup.
2
Scan the QR code with an authenticator app, or type the Manual key.
3
Enter the Authenticator code and click Enable MFA.
4
Save the 8 recovery codes shown. Each can replace a code once if you lose your phone.
The same section shows Recovery codes left, and offers Regenerate recovery codes and Disable MFA (both need a current code).
Lockout
- Five failed sign-ins within 15 minutes lock further attempts with those credentials, from the same address, for 15 minutes.
- An MFA prompt lasts 5 minutes and allows 5 tries. Ten wrong codes lock MFA sign-in for an hour.
Your account page
Avatar menu → Account holds your Personal details: photo (PNG, JPEG or WEBP, up to 5 MB), first name and last name. Your email can't be changed there.
Delete your account
Under Danger zone, click Delete account. Confirm your password, enter an MFA code if MFA is on, and tick the acknowledgement. This removes your account and personal data and can't be undone.
Warning
You can't delete your account while you are the only Owner of an organization. Make another member an Owner, or delete the organization, first.
Was this page helpful?