Get started
Signing in & account security
Every way to sign in to PharmaLineAI — magic link, email & password, social accounts and passkeys — plus resetting or changing your password, two-factor authentication, and managing your account.
What it does
PharmaLineAI supports several sign-in methods so you can use whatever suits your team. All of them land you in the same place; you can mix and match (e.g. sign up by magic link, then add a password later).
Where to find it
- `/auth/sign-in` — sign in or create an account.
- `/auth/forgot-password` — request a password-reset link.
- `/auth/reset-password` — choose a new password (opened from the reset email).
- Settings → Account & security (
/dashboard/settings?tab=security) — change your password, turn on two-factor authentication, and see or sign out your signed-in devices.
Step by step
Sign in with a magic link (no password)
- On `/auth/sign-in`, choose the Magic link tab and enter your email.
- Click Email me a magic link, open the email, and click Sign in. The link works once and only for a short time.
Sign in with email & password
- Choose the Password tab, enter your email and password, and click Sign in.
- New account? Click Create an account, enter your name, email and a password (8 to 128 characters — nothing else is required), then verify your email from the link we send before you can sign in.
- The eye at the end of any password field shows what you've typed; press it again to hide it. It hides again by itself when you submit.
Wherever you choose a new password — creating an account, resetting, setting or changing it — a strength meter under the field rates how easy it would be to guess, with a sentence saying why. It is advice, not a rule: any password of 8 to 128 characters is accepted. Long phrases of unrelated words score best; your name, your email, your pharmacy's name and dressed-up words like "Password1!" score low.
Sign in with Google, Microsoft or Apple
If your pharmacy has enabled social sign-in, you'll see Continue with Google / Microsoft / Apple buttons. Click one and approve in the provider's window. If you already have an account with the same verified email, they're linked automatically.
Sign in with a passkey
On a device that supports passkeys (Touch ID / Face ID / Windows Hello), click Sign in with a passkey and approve with your biometric or device PIN. Passkeys are the most phishing-resistant option.
Add a passkey
A passkey is a way into your account on its own — no password, and no two-factor code — so PharmaLineAI asks you to confirm it's you before one is added, and emails you whenever one is.
- Open Settings → Account & security and, under Passkeys, give it a name if you like (e.g. "Dispensary iPad"), then click Add a passkey.
- Confirm it's you, if you haven't recently:
- with two-factor on — enter the 6-digit code from your authenticator app (or Use a backup code). Even if you used your code to sign in, you're asked once more;
- without two-factor — enter your password;
- if your account has neither (you sign in by email link or Google, Microsoft or Apple) — click Sign in again; you come straight back here and can add it.
- Approve the passkey with your biometric, device PIN or security key.
If you haven't signed in recently, you're asked to Sign in again before a passkey can be added, whatever else you've confirmed — you come straight back here.
We then email you "A passkey was added to your account", with its name and when. If that wasn't you, remove it under Passkeys (the bin icon) and change your password. Removing a passkey asks for nothing. After a few wrong codes or passwords in a row, you'll need to sign in again before you can try once more.
Joining during the private beta
While PharmaLineAI is in private beta, the sign-in page shows a Private beta notice.
- Already have an account? Nothing changes — sign in normally with any method above.
- Creating a new account? Click Create an account and enter the Beta access code you were given (alongside your name, email and — on the Password tab — a password). Without a valid code, the account can't be created. Ask your PharmaLineAI contact if you don't have one.
Reset a forgotten password
- On the sign-in page, click Forgot password?.
- Enter your email and submit. For your security we always show the same confirmation whether or not an account exists.
- Open the reset email, click the link, and choose a new password. The link works once and only for a short time.
- Sign in with the new password. Resetting signs your account out on every device — including any you have lost track of, and anyone else's who had your old password.
Change your password
- Open Settings → Account & security.
- Under Change password, enter your Current password, then the New password and Confirm new password, and click Change password.
- You stay signed in here, and every other device is signed out — so if you are changing it because someone else might know it, their session ends too.
Turn on two-factor authentication
Two-factor adds a code from an authenticator app on your phone to your password, so a leaked password is not enough on its own. It protects a password, so set one first if you sign in without.
- Open Settings → Account & security and, under Two-factor authentication, click Set up.
- Confirm your password and click Continue.
- Scan this with your authenticator (Google Authenticator, 1Password, Bitwarden — any TOTP app works; Can't scan it? shows the key to type in), enter the 6-digit code, and click Turn on.
- Save your backup codes — they are shown once. Copy codes, keep them safe, then click I've saved them.
From then on, signing in asks you to Enter your code — after your password, after an email sign-in link, and after Google, Microsoft or Apple. You land where you were heading once the code is accepted. I don't have my phone lets you use a backup code instead. A passkey signs you in on its own, in one step: it is already something only your device has. On a device where you ticked Trust this device, you aren't asked for the code again for 30 days.
What each screen shows
- Sign-in — Password / Magic-link tabs, any enabled social buttons, the passkey button, Forgot password, and a create-account toggle.
- Forgot password — a single email field and a generic success message.
- Reset password — new-password + confirm fields, with the strength meter under the new one (or a "request a new link" prompt if the link has expired).
- Enter your code (
/auth/two-factor) — after a password, an email link or a Google, Microsoft or Apple sign-in on an account with two-factor: the 6-digit code, Trust this device for a device that is yours alone, and I don't have my phone for a backup code. - Settings → Account & security — your email, Change password (or Set a password), Two-factor authentication, passkeys, connected accounts, Where you're signed in, and your data.
- Confirm it's you — opens from Add a passkey or Set password when you haven't confirmed recently: your authenticator code (or a backup code), your password, or Sign in again, whichever your account uses. A passkey also needs a recent sign-in; if yours isn't, it asks you to Sign in again.
Tips & good to know
- You can set a password on an account that started passwordless (magic link / social / passkey) from your account settings. A password is a new way in, so unless you signed in recently you're asked to Sign in again first (you come straight back), and we email you "A password was added to your account" once it's set. If that wasn't you, reset your password from the sign-in page — that signs out every device.
- Changing your email sends a confirmation to your current address first, so a hijacked session can't move your account.
- Where you're signed in, in Account & security, lists every device with a live session; Sign out everywhere else ends every session but this one without changing your password.
- Signing a device out — by a password change or Sign out everywhere else — takes effect shortly. Resetting your password signs out every device.
Troubleshooting
- "This reset link is invalid or has expired" — request a new one from Forgot password.
- Passkey button missing — your browser/device doesn't support passkeys; use another method.
- "Too many wrong attempts — sign in again to continue" when adding a passkey — click Sign in again; you come back to Account & security and can confirm and add it.
- An email says a passkey was added and it wasn't you — remove it under Passkeys in Account & security, change your password, and use Sign out everywhere else.
- Social button missing — that provider isn't enabled for your pharmacy.
- Signed out on another device after a password change or reset — that is deliberate: changing or resetting a password signs out every other session. Sign in again with the new password.
- "PharmaLineAI is in private beta…" / "That beta access code isn't valid" — you're trying to create a new account during the private beta without a valid code. Existing accounts can still sign in; for a new account, enter a valid beta access code on the Create-an-account view.