> ## Documentation Index
> Fetch the complete documentation index at: https://docs.theagencyengineer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Sign-in and security basics

> Passwords, SSO, session length, and how we protect your workspace.

The sign-in screen lets every teammate get back into their agency workspace, whether they prefer social login or email and password. Two-factor authentication adds a second layer when the workspace policy requires it.

## Sign in to your workspace

Go to your workspace URL and you'll land on the **Welcome back** screen. Pick one of three sign-in methods:

* **Continue with Google** — Use a Google Workspace or Gmail account. A Google account picker opens so you can choose which identity to use. Select **Use another account** if the one you need isn't listed.
* **Continue with Facebook** — Opens a **Log into Facebook** popup at facebook.com. Enter your Facebook email or mobile number and password, then select **Log in**. Use **Forgot password?** inside the popup to recover the Facebook account, or **Create new account** if you don't have one yet. Make sure the Facebook account has access to the ad accounts you manage for clients.
* **Email and password** — Enter the email and password you used at sign-up.

### Email and password fields

| Field            | Notes                                                                                                                 |
| ---------------- | --------------------------------------------------------------------------------------------------------------------- |
| Email            | The work email tied to your account (for example, [*ihor@theagencyengineer.com*](mailto:ihor@theagencyengineer.com)). |
| Password         | Use the eye icon to toggle visibility while typing.                                                                   |
| Remember me      | Keeps you signed in on this browser. Leave unchecked on shared devices.                                               |
| Forgot password? | Sends a reset link to your email.                                                                                     |

Select **Sign in** to continue. New to The Agency Engineer? Use **Create an account** below the form to start the [sign-up wizard](/getting-started/create-account).

<Tip>
  You can mix methods on the same account. If you signed up with Google, you can still set a password later from account settings so you can fall back to email login if Google is unavailable.
</Tip>

## Two-factor authentication (2FA)

If 2FA is enabled on your account, a **Two-factor authentication** dialog appears after you submit your password or social login.

1. Open your authenticator app (for example, 1Password, Authy, Google Authenticator).
2. Enter the **6-digit code** shown for The Agency Engineer.
3. (Optional) Tick **Trust this device for 30 days** to skip the code on this browser until you sign out, disable 2FA, or reset your password.
4. Select **Verify & sign in**.

### Lost your authenticator?

Select **Use a backup code instead** on the 2FA dialog and enter one of the one-time backup codes you saved when you enabled 2FA. Each backup code works once.

<Warning>
  If you've lost both your authenticator and your backup codes, contact [support](/support/contact-support) from a verified email to recover access. Recovery requires identity checks and can take up to one business day.
</Warning>

### Trusted devices

The **Trust this device for 30 days** option remembers the browser only. It's invalidated automatically when you:

* Sign out of the workspace.
* Disable 2FA.
* Reset your password.

Avoid trusting shared or public computers.

## Forgotten password

Select **Forgot password?** on the sign-in form to receive a reset email. The link expires after a short window — request a new one if it doesn't arrive within a few minutes or if it has expired.

If your email provider blocks the reset message, check spam or ask IT to allowlist the notification sender domain.

## Best practices

* **Turn on 2FA** for every teammate, not just admins. Account managers with client data are high-value targets too.
* **Use a password manager** to generate unique passwords per workspace.
* **Save your backup codes** in your password manager the moment you enable 2FA.
* **Sign out of shared machines** instead of relying on "Remember me".
* **Review connected accounts** (Google, Facebook) periodically in account settings and revoke any you no longer use.

## Next steps

<CardGroup cols={2}>
  <Card title="Create your account" icon="user-plus" href="/getting-started/create-account">
    First-time setup with the seven-step sign-up wizard.
  </Card>

  <Card title="Login issues" icon="life-ring" href="/support/troubleshooting/login-issues">
    Fix password resets, 2FA failures, and session problems.
  </Card>
</CardGroup>