Signing in securely
Passwords, authenticator codes, one-time codes and passkeys, and what to do if you are locked out.
Every Sauti account is protected by two factors. Your password alone is never enough to get in.
Before your first sign-in#
Your organisation owner either:
- sends you an invitation by email or SMS. Open the link within 72 hours, choose a password and set up your authenticator; or
- creates your account and gives you a temporary password. You must change it the first time you sign in.
Sauti does not allow self-registration. If you need an account, ask your organisation owner.
Sign-in methods#
Open the sign-in page and choose one of the methods your account has:
| Method | What you enter |
|---|---|
| Password | Your email, username or phone, your password, then the 6-digit code from your authenticator app |
| Authenticator | Your email or phone and the 6-digit authenticator code, if your account allows it |
| One-time code | Your email or phone; Sauti sends a code by email or text message, where enabled |
| Passkey | Windows Hello, your phone's screen lock, a password manager or a security key |
A passkey counts as both factors, so it is the fastest and safest way in. After a successful sign-in Sauti may offer to add one. You can also add passkeys later in Settings › Passkeys.
Tip: Use an authenticator app such as Google Authenticator, Microsoft Authenticator or a password manager. Keep the recovery information it gives you somewhere safe.
Password rules#
- At least 12 characters. A short sentence you can remember works well.
- Passwords found in known data breaches are refused.
- Never share your password, and never send it by email or chat. Sauti staff will never ask for it.
Sessions#
- Campaign workspace sessions end after 8 hours of inactivity.
- Operator console sessions end after 30 minutes of inactivity.
- Field app sign-ins last 7 days and refresh while the phone keeps syncing.
Locked out?#
After 5 wrong attempts your account locks for 15 minutes. Wait, then try again carefully.
If you lost your authenticator or forgot your password:
- ask your organisation owner to set a new password for you. You will have to change it at your next sign-in; or
- ask for a reset link if you belong to more than one organisation.
If you think someone else has used your account, tell your owner immediately. They can end your sessions and reset your access, and the audit trail shows what happened.