Sign-in methods
VertaFlow gives you four ways to sign in. You don’t have to pick one — they all work against the same account, and you can add or remove them any time from Settings → Security → Sign-in methods.
Sign-in lives at app.vertaflow.io (white-label tenants sign in on their own subdomain — the link in your email always stays on the host you started on).
The four methods
Section titled “The four methods”Password (primary)
Section titled “Password (primary)”The sign-in screen leads with email + password. Passwords are 10 characters minimum. You can set one when you create your account, or add one later if you started with a magic link — see Your profile and Security settings.
Password is the primary path because some email apps (Apple Mail, Neo, corporate scanners) “preview” links and can burn a one-time magic link before you ever tap it. A password never has that problem.
Magic link (always on)
Section titled “Magic link (always on)”Click Forgot password? or Email me a link instead and we email a one-tap sign-in link to your account address. It expires in 5 minutes. Magic link is always available for your account email — there’s nothing to turn on, and it doubles as the password-recovery path (there’s no separate “reset password” email).
The link in the email points to a safe landing page first, then to the actual sign-in step only when you tap it — so a mail app’s link preview can’t spend the token for you.
If your workspace has Google sign-in enabled, you’ll see Continue with Google on the sign-in screen. One tap, no password. If the email on your Google account already matches a VertaFlow account, Google attaches to that existing account instead of creating a duplicate. See Google account linking.
Passkeys
Section titled “Passkeys”A passkey signs you in with Face ID, Touch ID, Windows Hello, or a hardware security key — no password, no email round-trip. Set one up once per device. See Set up passkeys.
Add or remove a method
Section titled “Add or remove a method”- Open Settings → Security.
- The Sign-in methods card lists every method with an On / Off badge.
- Email & password and Magic link reflect state here; you set or change your password in the Password card just above.
- Google has a Connect / Disconnect button.
- Passkeys are summarized here and managed in the Passkeys card below.
You can always remove a method as long as you keep at least one way in — and because magic link is always on for your email, you can never lock yourself out by removing Google or a passkey.