Billing and Your Account
Signing in Without a Password
There is no SiteCandor password. You ask for a link, it arrives by email, and clicking it signs you in. This is what each kind of link does and how long it lasts.
Search and all topics
Why There Is No Password
A password is one more thing to choose, remember, reuse somewhere worse, and reset. It also has to be stored, and the safest thing to do with a password is not hold one at all. So we email you a link instead, which proves the same thing — that you can read mail sent to that address.
How to Sign In
- Go to the sign-in page and enter the email address your subscription is under.
- Open the email and click the link. That is the whole process.
- You stay signed in on that browser for 30 days, so you will not be asking for a link every visit.
The Three Kinds of Link
- A sign-in link — 15 minutes, one use
- It is short and single-use, which is what makes it safe to send by email. Once you have clicked it, it cannot be clicked again — including by anybody who later reads that mailbox.
- A dashboard link in an email — 7 days
- The links inside audit and alert emails that take you straight to the thing they are about. They last longer, because you might read the email a few days late.
- Your session — 30 days
- How long the browser stays signed in after one successful link. Signing out ends it immediately; your data is untouched either way.
When a Link Does Not Work
Two things go wrong, and the sign-in page tells you which:
- Already used. Sign-in links work once. Ask for another from the same page — that is the intended remedy, not a workaround.
- Expired or broken. Past 15 minutes it stops working, and some mail apps clip a long link in half so it arrives incomplete. A fresh one takes a few seconds.
For an expired dashboard link inside an old email, the page it lands on offers to send a fresh one to the same address. You can ask up to 3 times a day for any one report, which is more than anybody needs and few enough that a stolen email cannot be used to hammer the button.
If You Cannot Remember Which Address
A site you subscribe to is kept under one email address, and the Billing screen lists every site held under the address you are signed in with. Sites someone has shared with you appear on your dashboard under “Shared by” and the address of the person who shared them. If a link brings up an empty account, the usual cause is that you subscribed, or were invited, under a different address — try the one your receipts or the invitation arrived at.
If none of them work, use the contact form and say which website you mean. Once you are signed in you can move the subscription to a different address yourself, under Account Email in your settings — in two steps, because an email change that happens without anybody noticing is how a subscription quietly leaves its owner.
Common Questions
Is a Link in an Email Really Safe?
An emailed link is safer than a password, which is the honest comparison. A sign-in link works once and expires in 15 minutes, so a copy sitting in an old mailbox is already useless — whereas a password stays valid until somebody changes it, and most people never do.
The Email Hasn't Arrived.
Check spam and promotions first, then confirm the address is the one your receipts come to. Sign-in links carry no marketing content, so they usually land in the main inbox — if one has not arrived at all, the address probably has no subscription under it and no site shared with it.
Can Two People Use the Same Account?
Yes, each with their own sign-in. Choose Team in the menu and, under Invite someone, add their email address and pick the sites they should see — view only, or as an editor who can also change the sites' settings (editors come in packs, on the Billing screen). They sign in with a link to their own address, the same way you do. A shared business mailbox works too: anybody who can read it can ask for a link.