> ## Documentation Index
> Fetch the complete documentation index at: https://help-empuls.xoxoday.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Login methods

> Sign in to Empuls without a password using an email or SMS one-time code, or a magic-link email.

If you've forgotten your password — or if your organization doesn't use passwords at all — you can still sign in to Empuls via a one-time code (OTP) delivered by email or SMS, or via a magic-link email that signs you in when you click it. These options appear on the sign-in page next to the password field. Access them from the standard Empuls sign-in page.

## When OTP and magic link are available

Your admin controls which sign-in methods are enabled. Possible setups:

| Setup                    | What you see on the sign-in page                       |
| ------------------------ | ------------------------------------------------------ |
| **Password only**        | Email + password fields                                |
| **Password + email OTP** | Password field + a "Sign in with code instead" link    |
| **Password + SMS OTP**   | Same, with SMS option if your mobile number is on file |
| **Magic link only**      | Just an email field; you receive a link                |
| **SSO + OTP fallback**   | SSO button + OTP for users who can't use SSO           |

If you don't see OTP or magic-link options, your admin may not have enabled them. Ask your HR team.

## Sign in with email OTP

<Steps>
  <Step title="Enter your email">
    On the Empuls sign-in page, type your work email.
  </Step>

  <Step title="Click Send code">
    Empuls sends a 6-digit code to your email. The code is valid for 10 minutes.
  </Step>

  <Step title="Check your email">
    Look for an email from Empuls with the subject "Your sign-in code". The code is in the body.
  </Step>

  <Step title="Enter the code">
    Type the 6 digits into the OTP field on the sign-in page and click **Verify**.
  </Step>

  <Step title="Done">
    You're signed in.
  </Step>
</Steps>

## Sign in with SMS OTP

Same flow as email OTP, but the code comes to your mobile number instead. SMS OTP is only available if:

* Your admin has enabled it as a sign-in method.
* Your mobile number is on file in your employee record.

If your mobile number changes, update it from [Account preferences](/employees/getting-started/notifications) so future SMS OTPs reach you.

## Sign in with magic link

<Steps>
  <Step title="Enter your email">
    On the Empuls sign-in page, type your work email.
  </Step>

  <Step title="Click Send magic link">
    Empuls emails you a sign-in link. The link is valid for 15 minutes and can only be used once.
  </Step>

  <Step title="Open the email and click the link">
    The link opens Empuls and signs you in automatically. No code to type.
  </Step>
</Steps>

## What if the code or link doesn't arrive?

* **Check spam / junk** — Empuls emails sometimes land in spam. Mark them as "not spam" so future codes arrive normally.
* **Check the email address** — A typo will send the code to nobody. Try again with the correct address.
* **Click Resend** — On the sign-in page, click **Resend code**. There's a 30-second cooldown between resends to prevent abuse.
* **SMS not arriving** — Verify your mobile number is current and reachable. Sometimes SMS gateways have regional delays.
* **Still nothing** — Contact your HR or IT team. They can verify your account status and trigger a code from the admin side.

## Onboarding verification

If you're a brand-new user who hasn't completed onboarding, your sign-in flow is slightly different:

1. You receive an onboarding email from your admin with a link.
2. The link signs you in for the first time and walks you through profile setup.
3. Once setup is complete, the link expires; subsequent sign-ins use OTP, magic link, password, or SSO depending on your admin's setup.

If your onboarding email has expired before you signed in, ask your admin to re-send it.

## Limits and gotchas

* Each code is single-use. Once used (or once you request a new one), the previous code is invalidated.
* Magic links expire after 15 minutes. If a link is more than 15 minutes old, request a new one.
* Five failed code attempts in a row temporarily lock the OTP path on your account for 30 minutes. Use another sign-in method or wait.
* OTP-only sign-in means your account doesn't have a password to remember — which is fine if your admin has set it up that way. Otherwise you can also set a password from [Account preferences](/employees/getting-started/notifications).

## Related

<CardGroup cols={2}>
  <Card title="Accessing the platform" href="/employees/getting-started/log-in">
    Full sign-in reference covering all methods.
  </Card>

  <Card title="Account preferences" href="/employees/getting-started/notifications">
    Update your email and mobile number so OTPs reach you.
  </Card>

  <Card title="SSO overview" href="/admin/user-authentication/sso-overview">
    If your org uses single sign-on, that takes precedence over OTP.
  </Card>
</CardGroup>