---
title: Sign in and account recovery
description: How to sign back into Lexpoint with Google or a magic link, what the six-digit challenge is, and how long you stay signed in.
product: Lexpoint — Individuals
audience: People managing their own Canadian immigration
doc_type: guide
canonical_url: https://docs.lexpoint.io/individuals/getting-started/sign-in/
app_routes: https://my.lexpoint.io/auth/login, https://my.lexpoint.io/auth/mfa-challenge
last_verified: 2026-09-03
keywords: Lexpoint sign in, login, magic link expired, two-factor code, sign out, session
license: Documentation © Lexpoint. Quote with attribution and a link to the canonical URL.
---
# Sign in and account recovery

Every later visit starts at [**my.lexpoint.io/auth/login**](https://my.lexpoint.io/auth/login),
where the heading reads *Welcome back*. The screen offers the same two methods as sign-up, and
there is no password field on it.

```media
id: getting-started-login
type: screenshot
caption: The sign-in screen, with the Google button above the email field.
shot: /auth/login — full page, nothing typed. Demo browser, light mode, 1440×900. Crop browser chrome.
src: /media/individuals/getting-started-login.webp
```

## Sign in with Google

Select **Continue with Google**. Google opens **Choose an account** — *to continue to Lexpoint.io*.
Pick the Google account you signed up with. If that is the one on this file, you land back inside
Lexpoint.

```media
id: getting-started-google-chooser-signin
type: screenshot
caption: Google’s account picker, naming Lexpoint.io as the app you are continuing to.
shot: Continue with Google from /auth/login until the Google “Choose an account” screen. Crop browser chrome. Redact every account name, email, and photo.
src: /media/individuals/getting-started-google-chooser.webp
```

## Sign in with an emailed link

1. Type your address into **Email address**. The field checks the address as you type and shows a
   green checkmark when it is valid.
2. Select **Send Magic Link**.
3. A dialog opens: **Check your email** — *We sent a sign-in link to* your address, with the
   reminder *Check spam folder if you don't see it.*
4. Open the email and select the link.

The dialog stays open while you go and check. Two controls are on it:

| Control | What it does |
|---|---|
| **Resend in 60s**, then **Resend** | Sends a fresh link. It is disabled until the countdown finishes, which stops a double-tap from sending two links and confusing which one is current. |
| **Use a different email** | Closes the dialog and returns to the form, so you can try another address. |

```media
id: getting-started-magic-link-sent
type: screenshot
caption: The confirmation dialog after a magic link is sent, with the resend countdown running.
shot: /auth/login — submit the form with a demo address so the "Check your email" modal is open and the resend countdown is still running. Light mode, 1440×900. Redact the email address shown in the modal.
src: /media/individuals/getting-started-magic-link-sent.webp
```

If a link no longer works, nothing is broken and nothing is lost — return to the sign-in screen and
send a new one.

## The six-digit challenge

If two-step verification is on for your account, signing in is not finished until you clear the
challenge at `/auth/mfa-challenge`. Lexpoint sends you there automatically; you never navigate to it
yourself.

The screen is labelled **Two-factor authentication** and reads *Verify your identity* — *Enter the
6-digit code from your authenticator app.* Type the six digits into the boxes and select **Verify**.

Underneath is **Sign in with a different account**, which abandons the challenge and returns you to
the sign-in screen. Use it when you have started signing in as the wrong person, not when the code
is being rejected.

Setting this up, and what to do if you lose the authenticator, are covered in
[two-step verification](/individuals/account/two-step-verification/).

## Where you land

Lexpoint decides where to send you after sign-in:

- **Profile incomplete** — straight to `/app/onboarding`. The dashboard is not reachable until the
  required answers exist.
- **Profile complete** — your dashboard, or the page you were trying to reach when you were asked
  to sign in. That destination is carried through the whole sign-in flow, including through the
  two-step challenge.

## Staying signed in

There is no "remember me" checkbox, because staying signed in is the default. When Lexpoint renews
your session it stores it for seven days, alongside a renewal credential good for thirty, and the
renewal happens quietly while you use the app. Closing the tab or restarting the browser does not
sign you out.

If the session does end while a page is open — it expired, or you signed out in another tab —
Lexpoint does not leave you on a dead screen. It sends you to sign in and remembers where you were.

## Signing out

Open the account menu in the app and select **Sign Out**. That clears the sign-in cookies on the
server side, not only in the tab, and returns you to the sign-in screen.

Sign out deliberately on any device that is not yours. A closed browser tab is not a sign-out.

## Related

- [Create your account](/individuals/getting-started/create-account/) — if you have not signed up yet
- [Two-step verification](/individuals/account/two-step-verification/) — turning the six-digit challenge on, and recovering from a lost phone
- [Onboarding, step by step](/individuals/getting-started/onboarding/) — where a first sign-in takes you
- [Your account settings](/individuals/account/) — the sign-in methods connected to your account

## Frequently asked questions

### I never chose a password. How do I sign in?

You do not need one. A client account signs in with Google or with a magic link emailed to your address. The sign-in screen has no password field.

### The magic link did not arrive. What now?

Check the spam folder first — the confirmation dialog says so for a reason. If it is genuinely missing, wait for the resend countdown to finish and select Resend. Each new link supersedes the last.

### Why is Lexpoint asking for a six-digit code?

Two-step verification is switched on for your account. The code comes from your authenticator app, not from an email or a text message.

### Does Lexpoint sign me out when I close the browser?

No. A signed-in session survives closing the tab and restarting the browser. Use Sign Out in the account menu when you are finished on a device that is not yours.