Sign in and account recovery

Every later visit starts at my.lexpoint.io/auth/login, where the heading reads Welcome back. The screen offers the same two methods as sign-up, and there is no password field on it.

The sign-in screen, with the Google button above the email field.

Sign in with Google

Select Continue with Google. Google opens Choose an account — to continue to Lexpoint.io. Pick the Google account you signed up with. If that is the one on this file, you land back inside Lexpoint.

Google’s account picker, naming Lexpoint.io as the app you are continuing to.

Sign in with an emailed link

1. Type your address into Email address. The field checks the address as you type and shows a green checkmark when it is valid.
2. Select Send Magic Link.
3. A dialog opens: Check your email — We sent a sign-in link to your address, with the reminder Check spam folder if you don’t see it.
4. Open the email and select the link.

The dialog stays open while you go and check. Two controls are on it:

Control	What it does
Resend in 60s, then Resend	Sends a fresh link. It is disabled until the countdown finishes, which stops a double-tap from sending two links and confusing which one is current.
Use a different email	Closes the dialog and returns to the form, so you can try another address.

The confirmation dialog after a magic link is sent, with the resend countdown running.

If a link no longer works, nothing is broken and nothing is lost — return to the sign-in screen and send a new one.

The six-digit challenge

If two-step verification is on for your account, signing in is not finished until you clear the challenge at /auth/mfa-challenge. Lexpoint sends you there automatically; you never navigate to it yourself.

The screen is labelled Two-factor authentication and reads Verify your identity — Enter the 6-digit code from your authenticator app. Type the six digits into the boxes and select Verify.

Underneath is Sign in with a different account, which abandons the challenge and returns you to the sign-in screen. Use it when you have started signing in as the wrong person, not when the code is being rejected.

Setting this up, and what to do if you lose the authenticator, are covered in two-step verification.

Where you land

Lexpoint decides where to send you after sign-in:

• Profile incomplete — straight to /app/onboarding. The dashboard is not reachable until the required answers exist.
• Profile complete — your dashboard, or the page you were trying to reach when you were asked to sign in. That destination is carried through the whole sign-in flow, including through the two-step challenge.

Staying signed in

There is no “remember me” checkbox, because staying signed in is the default. When Lexpoint renews your session it stores it for seven days, alongside a renewal credential good for thirty, and the renewal happens quietly while you use the app. Closing the tab or restarting the browser does not sign you out.

If the session does end while a page is open — it expired, or you signed out in another tab — Lexpoint does not leave you on a dead screen. It sends you to sign in and remembers where you were.

Signing out

Open the account menu in the app and select Sign Out. That clears the sign-in cookies on the server side, not only in the tab, and returns you to the sign-in screen.

Sign out deliberately on any device that is not yours. A closed browser tab is not a sign-out.

Related

• Create your account — if you have not signed up yet
• Two-step verification — turning the six-digit challenge on, and recovering from a lost phone
• Onboarding, step by step — where a first sign-in takes you
• Your account settings — the sign-in methods connected to your account