Accounts, organizations & members

How you sign in, how your team's shared space works, and who can do what.

Your account is you. An organization is the shared space your team works in: it owns projects, tasks, runs, connected services, members, and usage. One account can belong to any number of organizations.

Your account is your email address

A confirmed email address is the account. Everything else — a password, a GitHub login, a Google account, a Linear user — is a way in, and one account can hold as many as you like.

So you can sign up with Google, add a password six months later because you left that Google account behind, attach GitHub because a teammate's approver rule names it, and drop Linear when you stop using Linear. You land on the same account every time, because the email decides.

Signing up sends a six-digit code to the address you gave, and the account exists once you confirm it. If the address already has an account, the email says so, and the code signs you in to that account instead, followed by your authenticator's code if two-factor is on. Signing up never opens an existing account on a password alone.

Managing how you sign in

Settings → Sign-in methods — on the web, the desktop app, the Mac and both phones — lists every way into your account. From there you can:

• Add a provider, or remove one.
• Set or change your password. Changing it ends every other session and keeps the one you are on.
• Change your email address. The old address is warned when you ask for the change, not after it lands.
• Turn on two-factor authentication with an authenticator app, from the account page on the web or the desktop app. Once it is on, every sign-in asks for the code — on every device.
• See the devices signed in as you, end one, or end all but this one.
• Delete your account.

The last way in is refused before it is offered: if removing a provider would leave you with no way to sign in, the button says so rather than failing afterwards.

Several accounts on one device

Phones, the Mac, and the web can be signed in as more than one account at once, and switching between them is instant — no password, nothing signed out. Each account keeps its own notifications and cached work, so coming back is immediate.

Create or join an organization

Signing up creates only your account. Onboarding then asks you to create an organization — you become its owner — or join one with an invite link. You can create more later from the organization switcher.

Who can do what

Every organization has one owner, who can do everything, and every member holds the role Everyone. People with Manage roles can make more roles — Release managers, Design, Admins — choose what each may do, and give them out. A person can hold several roles and may do everything any of them allows. See Roles & permissions.

A project can narrow that for itself. A private project is seen only by the roles and people it lets in, and any project can give a role or a person more, or less, there than elsewhere. See Private projects & access.

Screens behind a permission you don't hold stay visible rather than disappearing — read-only, with a line naming the permission they need.

Members

Members lists everyone in the organization, each with their roles as coloured chips, highest first, and marks the owner. From there:

• Give or take roles — with Manage roles, and only roles below your own highest role that grant nothing you don't hold.
• Remove somebody — with Manage members, and only somebody whose roles all sit below your own highest role. The owner is never removed.
• Leave — anyone can, except the owner, who hands the organization over first.

Invite your team

From Members, anyone with Manage members can create an invite, optionally for an email address and with the roles the new member should start with besides Everyone. Giving roles this way also takes Manage roles, and only roles you could give anyway. With an address, Peractor sends the join link for you; either way you get a copyable link to share yourself.

The invite page shows the organization and the roles it gives, asks the visitor to sign in or create an account, and joins them in one click. An invited person who already has an account sees the invitation waiting in their own inbox. Pending invites can be revoked at any time, and the people with Manage members are told when somebody joins.

An invite that gives a role you couldn't give is listed for you without its link. You can see who it's for and what it gives, but only someone who could give those roles can copy it, send it again or revoke it. Changing an invite's roles gives it a new link.

Switching organizations

Every surface has a switcher: the dashboard and desktop app in the sidebar header, the Mac in its sidebar, and the phones in the drawer. Switching changes what every panel shows, and nothing is shared across organizations.

Ways to sign in

Email and password — eight characters minimum — or Continue with GitHub, Google, or Linear where the server has them configured.

Forgotten your password? Below the password on every sign-in form, Email me a sign-in code sends a six-digit code to your address, and typing it back signs you in. With two-factor on, your authenticator's code is still asked for after it. The code signs you in and changes nothing else: your password stays as it was. If no account has that address, the email says so instead.

To replace a forgotten password, open Account → Sign-in methods → Change password within ten minutes of completing the code sign-in. You can set a new one without entering the old one once during that window. Changing it signs out your other devices. After the window expires, sign in with another email code or supply your current password.

The desktop app and the Mac sign in through your browser and receive the session back over a local loopback, so you never type a password into them. The phones use the system browser sheet the same way.

Next: Roles & permissions · Plans & usage · Projects & repositories