Signing in with an email code

LexSalim uses passwordless sign-in. There is no password to create, remember or leak. Instead, each time you sign in the application sends a one-time code to your verified email address.

Steps

1. Open the LexSalim application and choose Sign in.
2. Enter the email address your account was registered with.
3. Check your inbox for a message from LexSalim containing an 8-digit code. The code is valid for five minutes.
4. Type or paste the code into the sign-in screen. You have three attempts per code.
5. If your organisation requires it, enter the six-digit code from your authenticator app as a second step.

You then land in your organisation's workspace.

Resending a code

If the code has not arrived after a minute, choose Resend code. A new code replaces the previous one, which stops working immediately. Resends are limited to one every 60 seconds and a small number per hour to protect your account; if you reach the limit, wait and try again.

Entered the wrong address?

Choose Change email on the code screen to go back. For privacy, the application gives the same response whether or not an address is registered, so a mistyped address simply produces no email.

Security notes

• Codes are stored only in hashed form and are never shown in logs.
• Too many failed attempts temporarily lock sign-in for that address. The lock lifts automatically.
• Sensitive actions (such as changing your email address or disabling two-factor authentication) ask for a fresh authenticator check even when you are already signed in.
• LexSalim never asks for a password, and staff never ask you for a sign-in code. If you receive such a request, do not respond and contact support.

Not yet open to the public

The application is in early access. Until public sign-in opens, the Sign in link on the website explains availability rather than showing a sign-in form.