Sign-in methods
VertaFlow gives you four ways to sign in. You don’t have to pick one — they all work against the same account, and you can add or remove them any time from Settings → Security → Sign-in methods.
Sign-in lives at os.vertaflow.io/signin — VertaFlow’s rebuilt app (“your business OS”). White-label tenants sign in on their own subdomain, and the link in your email always stays on the host you started on.
The four methods
Section titled “The four methods”Password (primary)
Section titled “Password (primary)”The sign-in screen leads with email + password. Passwords are 10 characters minimum. You can set one when you create your account, or add one later if you started with a magic link — see Your profile and Security settings.
Password is the primary path because some email apps (Apple Mail, Neo, corporate scanners) “preview” links and can burn a one-time magic link before you ever tap it. A password never has that problem.
Magic link (always on)
Section titled “Magic link (always on)”Click Forgot password? or Email me a link instead and we email a one-tap sign-in link to your account address. It expires in 5 minutes. Magic link is always available for your account email — there’s nothing to turn on, and it doubles as the password-recovery path (there’s no separate “reset password” email).
The link in the email points to a safe landing page first, then to the actual sign-in step only when you tap it — so a mail app’s link preview can’t spend the token for you.
If your workspace has Google sign-in enabled, you’ll see Continue with Google on the sign-in screen. One tap, no password. If the email on your Google account already matches a VertaFlow account, Google attaches to that existing account instead of creating a duplicate. See Google account linking.
Passkeys
Section titled “Passkeys”A passkey signs you in with Face ID, Touch ID, Windows Hello, or a hardware security key — no password, no email round-trip. Set one up once per device. See Set up passkeys.
Add or remove a method
Section titled “Add or remove a method”- Open Settings → Security.
- The Sign-in methods card lists every method with an On / Off badge.
- Email & password and Magic link reflect state here; you set or change your password in the Password card just above.
- Google has a Connect / Disconnect button.
- Passkeys are summarized here and managed in the Passkeys card below.
You can always remove a method as long as you keep at least one way in — and because magic link is always on for your email, you can never lock yourself out by removing Google or a passkey.