Sign in without a password

RoofPropage has no passwords at all. Every sign-in works the same way: type your email address, and we send you a one-time link. Click it and you land on your dashboard. Nothing to remember, nothing to reset, and nobody can guess their way in.

Sign in#

1. Go to the sign-in page. It says "Sign in" and asks for one thing: your email.
2. Type the address you used when you claimed your site and tap "Email me a sign-in link". Under the button it says "No password. We'll email you a secure one-time link."
3. The screen changes to "Check your email" and repeats the address the link went to — worth a glance, because a typo there is the usual reason nothing arrives.
4. Open the email and tap the link. You land on your dashboard, signed in.

The email comes from noreply@roofpropage.com. Adding that to your contacts keeps it out of spam.

Or use the 6-digit code#

The same email also contains a 6-digit code, and it does exactly what the link does. It is there for the most common awkward moment: your email is on your phone, but you want to work on your site on the computer in front of you.

On the "Check your email" screen there is a box labelled "Or enter the 6-digit code from the email". Type the six digits, tap "Continue", and you are in. Use the code from the newest email if you asked for more than one.

When something goes wrong#

Nothing arrived. Give it a couple of minutes, then check your spam or junk folder. The screen has a "resend the link" button; it waits about a minute between sends, and counts down so you can see when it is ready.

"That sign-in link has expired or was already used." Links are one-time and last about an hour. Ask for a fresh one on the same screen — that message appears right above the email box.

"That sign-in link can only be opened in the browser that asked for it." This happens when the link is opened somewhere other than where you asked for it — for example you tapped it in a phone email app after starting on your laptop. Ask for a fresh link and open it in the browser you are actually working in, or use the 6-digit code instead, which works across devices.

Wrong email address. Tap "Go back" or "Use a different email" and type the right one. Your site is attached to one address, so it has to be the address you claimed with.

"Too many code attempts." Mistyping the code several times pauses code entry for a few minutes. Clicking the link in the email still works. The same is true the other way round: asking for a great many links in a few minutes pauses sending for up to ten minutes, then clears by itself.

Why no password#

A password is one more thing to lose on a roof, and reused passwords are how most small-business accounts get taken over. A link that works once, expires within the hour and only ever goes to your inbox is both easier and harder to steal. It is the same approach your bank uses for a one-time code, minus the password in front of it.