Signing in

SCMTR has no passwords. There is nothing to choose, nothing to store in a password manager, and nothing that can be reused against you if it leaks somewhere else. You prove who you are through Google, through Microsoft, or through a link sent to your email address.

What are my options for signing in?

Google. One click, and you are in. Use this if your work email is a Google account.

Microsoft. One click, and you are in with the Microsoft 365 work account your office already uses — or a personal Microsoft account. One condition, and it is Microsoft's rather than ours: Microsoft has to vouch that the account's email address belongs to your organisation's domain. If it cannot — the usual reason is that your organisation's IT has never verified the domain in Microsoft 365 — the sign-in is refused with a page that says so. Ask your Microsoft 365 administrator to verify the domain, or sign in with Google or an email link to the same address instead; either reaches the same organisation.

An email link. Type your address, and we send you a link. Opening it signs you in. This works with any email address — a company mailbox, an address hosted anywhere.

If you were invited to an organisation, sign in with the exact address the invitation was sent to. That is what attaches you to the right organisation and role. Signing in with a different address creates a separate, empty account instead.

If you already use SCMTR in another organisation, signing in does not move you. A line under the header says who invited you, and Review the invitation shows what joining changes before you choose — see Your team.

Do I have to request a link every time?

Yes, and this is deliberate. An email link is not a one-off signup step — it is how you sign in, every time. There is no password to fall back on because there is no password at all.

In practice you will rarely see it: a sign-in lasts thirty days, so a filer working most days signs in about once a month.

I asked for a link on my laptop but read email on my phone. What happens?

You end up signed in on the laptop — the device where you started. That is the point.

Open the email wherever it is convenient, approve it there, and the page you left open on your laptop continues on its own. You do not need to forward the email to yourself, and you do not need to retype anything.

What is the code, and why am I being asked to match it?

When you ask for a link, the page shows a short code like KRP-729. The email shows the same code, and the approval screen asks whether the two match.

This is the part that keeps your account safe, so it is worth understanding rather than clicking through.

Because approving signs in the device that started the sign-in, a link is only safe to approve if you are the one who started it. If somebody else typed your address into SCMTR, you would receive a genuine email from us — and approving it would sign them in as you.

The code is how you tell the difference. If you did not start a sign-in, there is no screen anywhere showing you a code, so there is nothing to match, and that is your answer: close the email. Nothing happens, and nobody gets access.

Only approve when the code in the email matches the code on the screen you started from.

How long do I have?

Ten minutes. A link works once and then stops working — approving a second time does nothing.

If it expires, nothing is wrong with your account. Ask for another one.

The email has not arrived

In order of likelihood:

Check spam. It comes from support@scmtr.io. Marking it "not spam" once usually settles it for good, and you can reply to it — a person reads that mailbox.Check the address you typed. A typo produces no error, because we do not reveal whether an address has an account — that would let anyone test which of your colleagues use SCMTR.Wait a minute. Mail is usually instant, but not always.Ask again. Requesting a new link is free and invalidates nothing you need.Unless it said we have sent as many sign-in emails as we can today. That is a ceiling on the platform's outgoing mail for the day, not anything about your address. Sign in with Google or Microsoft instead — neither sends an e-mail — or ask again tomorrow.

If several attempts produce nothing, your mail server may be filtering us. Ask whoever runs it to allow support@scmtr.io, and email us from another address so we can help.

I got a sign-in email I did not ask for

Ignore it, and do not approve it.

Somebody entered your address into the sign-in form. That alone gives them nothing — the email is useless without you approving it, and you cannot approve it correctly without a code to match. Deleting it is enough.

If it keeps happening, tell us at support@scmtr.io.

Can I stay signed in on more than one device?

Yes. Signing in on your phone does not sign you out on your laptop. Each device holds its own sign-in, and each lasts thirty days from when it was created.

Where am I signed in?

Open the account menu (your picture or initial, top right) and choose Where you're signed in, or go to Settings → Sign-ins. It lists every browser and phone signed in to your account: what it looks like ("Chrome on Windows", "SCMTR app on Android"), when it signed in, the IP address it signed in from, and roughly when it was last used. The one you are using is marked This browser.

"Last active" is noted about once a day, so "Active today" means some time in the last day, not this minute.

Signing out

Use Sign out in the account menu. That ends the sign-in on the device you are using; other devices keep theirs.

To sign out a different device — a laptop that went missing, an office PC you forgot, a browser you do not recognise — open Settings → Sign-ins and press Sign out beside it. Sign out everywhere else ends every sign-in but the one you are using, including the phone app, which then stops getting alerts until you sign in on it again.

A device signed out this way has to sign in again the way you do — with your e-mail inbox, or your Google or Microsoft account. So if somebody else got in, also make sure nobody else can open those.

I got a "New sign-in to your SCMTR account" e-mail

We send it when your account is signed in to from a browser or phone it has not been used on before, with the time, the device and the IP address. If it was you — a new laptop, another browser, a private window, or the phone app, which counts as new every time it signs in — there is nothing to do. If it was not you, open Settings → Sign-ins and sign that device out.

The e-mail never contains a sign-out link, and you should not trust one that does: the only link in it goes to the Sign-ins page, which asks you to be signed in first. It cannot be switched off, and at most five are sent to one account in a day.

Several of us use one login. Is that a problem?

It works, but everything is recorded under that one person's name, so afterwards nobody can tell who prepared or sent a filing. Each person can have their own login instead: an admin invites them from Settings → Team. See Teams and filing agents.

Related

E-mail from SCMTR — every message the platform sends, which two you can switch off, and what to do when one has not arrived.Using SCMTR — what to do once you are in.Troubleshooting — symptoms and fixes across the whole product.