Sign up and sign in

You sign in to Terminus Hub with your email and a password, or through your company’s identity provider if your account uses single sign-on (SSO). If you have turned on two-factor authentication, you also enter a code from your authenticator app. This page covers every step of getting in, from creating an account to recovering from a lockout.

​

Create an account

Your new account starts on a Business trial and comes with a workspace named Main, so you can go straight to the quickstart. See Billing for what happens when the trial ends.

​

Sign in

Signing in is a two-step, email-first flow: If you belong to more than one account, you pick which one to work in after signing in. If you belong to exactly one, Terminus opens it for you.

​

Single sign-on

When your email domain has SSO set up, Continue always sends you to your identity provider. Account owners and admins can still sign in with a password even when the account enforces SSO, so they have a way in if the identity provider is down. To do that, click Use a password instead on the sign-in screen before you click Continue. For a member at a domain that enforces SSO, the password route still ends at the identity provider. SSO is set up by an account admin and requires the Enterprise plan. See Single sign-on.

​

Two-factor authentication

If you have turned on two-factor authentication, signing in with your password takes you to a Two-factor authentication screen:

1. Open your authenticator app and enter the 6-digit code it shows for Terminus Hub.
2. Click Verify.

You have 10 minutes after entering your password to enter the code. After that, Terminus returns you to the sign-in screen with a message that your sign-in session expired, and you start again. If you sign in through SSO, your identity provider handles any second factor and Terminus Hub does not ask for a code. To turn two-factor authentication on or off for yourself, see Profile.

​

Use a backup code

When you set up two-factor authentication you saved 10 backup codes. If you do not have your authenticator app, click Use a backup code on the code screen and enter one of them (they look like 3f2a6-37d2d). Each backup code works once. Click Use your authenticator app to switch back.

​

If you lose your authenticator and your backup codes

Ask an owner or admin of your account to reset your two-factor authentication. The reset signs you out everywhere and emails you. You then sign in with only your password, and if the account requires two-factor authentication you set it up again before you can continue. See Team members for how admins reset a member. Admins cannot reset the account owner’s two-factor authentication, so if you are the owner, keep your backup codes somewhere safe.

​

When your account requires two-factor authentication

An account admin can require two-factor authentication for everyone in the account (see Security). If you have not set it up yet, signing in takes you to a setup screen instead of the app: confirm your password, scan the QR code with your authenticator app, enter the code it shows, then save your backup codes and tick I saved these codes. From that screen you can also Switch account or Sign out. Members who signed in through the account’s SSO are not asked to set it up.

​

Accept an invitation

When a teammate invites you, you get an email with a link. The link opens a page titled Account <name> invites you to join, which also shows the role you are being given.

• If you are new to Terminus Hub, enter your Full Name and a Password (your email is already filled in from the invitation) and click Sign Up and Accept. You do not need to confirm your email separately; the invitation link already proves it.
• If you already have a Terminus Hub login, click Sign in first, sign in, and you return to the invitation. Then click Proceed as <your name>.

An invitation link can stop working. The page tells you why:

​

If you cannot sign in

​

Related