Sign in and secure your account

When you would do this

Every time you use Stablerail, and whenever you set up a new device.

Steps

1. Go to the sign-in page and enter your work email address.
2. Enter the one-time code emailed to you.
3. Confirm with your passkey: Face ID, Touch ID, Windows Hello, or your hardware security key.
4. Enter the six-digit code from your authenticator app.

If a passkey is not available on the device you are using, you may be able to sign in with the email code and authenticator code alone. This is recorded in the audit log as a fallback sign-in.

Setting up a new device

Your authenticator app moves with you if your authenticator supports it, or can be set up again using your recovery key.

A passkey is tied to a device. Register a passkey on each device you use regularly rather than relying on the fallback every time.

Sessions

You are signed out automatically after 15 minutes without activity, and again after a longer fixed period even if you have been active the whole time. Sign back in to continue. Anything already in the signing queue is unaffected.

If you belong to more than one organisation, you act inside one at a time and switch between them from the organisation switcher. Only an Admin can create a new organisation.

Protecting your account

• Register your passkey and authenticator on a device you control and expect to keep.
• Store your recovery key offline, not in the same password manager you sign in with.
• Do not share sign-in codes with anyone, including anyone claiming to be from Stablerail. We will never ask for one.
• Review Governance › Audit log occasionally. Fallback sign-ins and unusual activity are recorded there.
• Keep Settings › Account email preferences switched on for the notifications you want. Critical login and security emails are always sent and cannot be turned off.

Common problems and what they mean

The authenticator code is rejected. Your device clock has drifted. Turn on automatic time setting and try again.

Your passkey is not recognised on this device. You have not registered one here. Use the email and authenticator fallback, then register a passkey on this device.

You are stuck in a sign-in loop. Confirm you are using the email address your account was created with. If it persists, contact support.

You joined but see no organisation. You signed in with a different email address from the one your invitation was sent to. Ask your Admin to revoke and re-invite to the correct address.

You lost your device. See "Recover access to your account".