CM Chat logoCM Chat

Using CM Chat · Step 3 of 6

Signing in

Most people sign in with the 8-digit code we email them, and that is all. If your workspace owner requires a second step, you also use a passkey, an authenticator app or a recovery code. A passkey on its own counts as both steps.

The ways to sign in

A passkey replaces a password. It lives on your phone, laptop, or a security key. You unlock it with your fingerprint, face, or device PIN.

Why we recommend it:

  • Nothing can be typed in by a scammer. A passkey only works on your real workspace address, so a fake look-alike website cannot trick you.
  • It is faster than waiting for a code.
  • A passkey that checks your fingerprint, face or PIN counts as both steps.

To use it: open your workspace address, click Sign in with a passkey, and approve on your device.

2. Email code (and a second step, if your workspace requires one)

  1. Open your workspace address (yourteam.cmchat.app).
  2. Type your email address under Email address.
  3. Complete the security check if one appears.
  4. Click Continue with email.
  5. Open your email and find the 8-digit code.
  6. Type the code under Verification code and click Verify and continue. The code works for a short time, and only a few tries are allowed.
  7. If your workspace requires a second step, do it now. Type the 6-digit Authenticator app code and click Verify code, or click Use your passkey, or click Use a recovery code.

For safety, CM Chat always says it sent a code, even if the address is not in the workspace. This stops strangers from finding out who has an account. If no email arrives, check spam and make sure you used the address your admin invited. If email is not available for your service, the screen says no code was sent; sign in with a passkey or ask your administrator.

3. Authenticator app

An authenticator app (such as Google Authenticator, Microsoft Authenticator, or any app that makes 6-digit codes) shows a new code every 30 seconds. After the email code, type the current code from the app. See Setting up two-step verification.

Locks and limits

  • Too many wrong tries cause a short lock. Wait a little while, then try again.
  • You can only ask for a limited number of email codes in a short time.
  • If you are locked out for another reason, see Lost your phone?.

Staying signed in

Your admin sets how long you stay signed in. The default is up to 7 days of inactivity and 30 days in total for members; shorter for guests. After that you simply sign in again. You can see and end sessions in Devices and sessions.

Signing out

Click your name at the bottom of the sidebar, then Sign out. To sign out of everything, see Devices and sessions.