> ## Documentation Index
> Fetch the complete documentation index at: https://help.propops.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Sign in to PropOps securely, understand the login security checks including two-factor prompts, and manage your active browser sessions.

PropOps Web uses email and password authentication, with additional security checks that protect your account when you log in from a new location or perform sensitive actions.

## Signing in

<Steps>
  <Step title="Go to the login page">
    Navigate to your PropOps URL and enter your email address and password.
  </Step>

  <Step title="Pass security checks">
    Depending on your account type and login context, PropOps may present one or more security steps before granting access. These are described in [Security checks during login](#security-checks-during-login) below.
  </Step>

  <Step title="Access the platform">
    Once all checks pass, you are taken to your dashboard.
  </Step>
</Steps>

### Remember Me

Select **Remember Me** on the login page to stay signed in for up to **30 days** without re-entering your password. Your session will still expire if you sign out manually or if your password is changed.

***

## Security checks during login

PropOps applies automatic security checks at login. Depending on your account type and circumstances, you may be shown one or more of the following screens before you reach your dashboard.

<AccordionGroup>
  <Accordion title="Email verification">
    **What you see:** A screen asking you to enter a 6-digit code that was sent to your email address.

    **Why it appears:** Your email address has not yet been verified. PropOps requires a verified email before you can access the platform.

    **What to do:**

    1. Check your inbox for an email with the subject line containing your 6-digit verification code.
    2. Enter the code in the six boxes on screen. You can paste the full code and it will fill automatically.
    3. Select **Verify Email** to continue.

    If the code has expired or you did not receive it, select **Resend Email**. A cooldown period applies between resends.

    Staff accounts do not require email verification.
  </Accordion>

  <Accordion title="New location verification">
    **What you see:** A screen showing your current login location alongside your usual trusted location, with a prompt to enter a 6-digit PIN.

    **Why it appears:** Your login originated from an IP address that PropOps does not recognise for your account. This could be a new office, home network, or device.

    **What to do:**

    1. Check your inbox — a 6-digit PIN was sent to your email address automatically when you logged in.
    2. Enter the PIN in the six boxes on screen.
    3. Select **Approve** to add this location to your trusted list and continue.

    Once approved, future logins from the same network will not trigger this check. If you did not receive the PIN, select **Resend PIN** after the cooldown period.

    <Warning>
      If you did not attempt to log in from a new location, do not approve the request. Contact your administrator immediately — this may indicate an unauthorised access attempt.
    </Warning>
  </Accordion>

  <Accordion title="Document approval">
    **What you see:** A list of documents (such as terms of service, privacy policy, or platform agreements) that require your review and acceptance.

    **Why it appears:** Your account type requires you to approve certain documents before accessing the platform. This also appears when a document has been updated since your last approval.

    **What to do:**

    1. Select **Read Document** next to each item to review its contents.
    2. Tick the checkbox for each document you have read and accept.
    3. Select **Approve and Continue** once all documents are checked.

    If you do not wish to accept the required documents, you may select **Reject and Terminate**, which will close your account.
  </Accordion>

  <Accordion title="Password confirmation (re-authentication)">
    **What you see:** A prompt asking you to re-enter your current password before continuing to a specific area or action.

    **Why it appears:** You are attempting to access a sensitive area — such as account settings, security preferences, or restricted data — and PropOps requires you to confirm your identity before proceeding.

    **What to do:**

    1. Enter your current password in the field shown.
    2. Select **Confirm and continue**.

    You are then taken directly to the page or action you requested. You will not be prompted again for the same area within the current session window.

    If you enter your password incorrectly too many times, your session will be locked. Sign out and sign back in to try again.
  </Accordion>
</AccordionGroup>

***

## Mobile and desktop app authentication

The PropOps mobile app and desktop (Electron) app authenticate using a secure bearer token rather than a browser session. This token is issued when you sign in through the app and is stored securely on your device.

* Long-lived tokens let you stay signed in across app restarts without re-entering your password.
* You can revoke a mobile or desktop session at any time from your profile — see [Managing your sessions](#managing-your-sessions).

***

## Managing your sessions

You can view all active sessions for your account and sign out of any of them remotely.

<Steps>
  <Step title="Open your profile">
    Select your name or avatar in the top navigation to open your profile.
  </Step>

  <Step title="Go to Sessions">
    Find the **Sessions** or **Active sessions** section within your profile or account security settings.
  </Step>

  <Step title="Review active sessions">
    Each session shows the device type, approximate location, and when it was last active.
  </Step>

  <Step title="Revoke a session">
    Select **Revoke** next to any session you do not recognise or no longer need. That session is invalidated immediately — anyone using it will be signed out.
  </Step>
</Steps>

<Tip>
  If you see a session you don't recognise, revoke it immediately and change your password. Contact your administrator if you suspect your account has been accessed without your knowledge.
</Tip>

***

## Password breach monitoring

PropOps periodically checks whether your password has appeared in a known data breach. This check uses a privacy-preserving method — your actual password is never sent externally.

If your password is found in a breach:

1. All your active sessions are immediately invalidated.
2. You are signed out and cannot sign back in with the same password.
3. You receive an email with a link to reset your password.

Reset your password using the link in the email, then sign in again with your new credentials.

***

## If you are locked out

| Situation                                        | What to do                                                                 |
| ------------------------------------------------ | -------------------------------------------------------------------------- |
| Forgot your password                             | Use **Forgot password** on the login page to receive a reset link by email |
| Cannot access your email                         | Contact your PropOps administrator to reset your account                   |
| Re-authentication locked after too many attempts | Sign out and sign back in, then retry the action                           |
| Suspicious login from an unknown location        | Revoke all sessions from your profile and change your password             |

If you cannot resolve the issue yourself, contact your administrator or PropOps support.