Signing in is usually email and password, but ClinyPal adds a check when something looks new: a different device, a long gap, or a clinic rule. This explains when a code appears and what each message on the sign-in page is telling you.
Sign in with your email and password
The sign-in page asks for your email first and your password second. That's because ClinyPal stores each clinic's data in one region, and your email tells it which region holds your account; if yours lives elsewhere you're moved to that region's sign-in page with the email already filled in. The page always says which region your data is stored in at the bottom.
Enter your work email and select Continue
Use the email your user was created with. If you're not sure, the invitation email your clinic sent you went to it.
Enter your password and select Sign in
Your email is shown above the password with Not you? beside it, which takes you back to the email step. Forgot password? is next to the password field; see Reset your password.
Most of the time that's it and you land on your dashboard. Sometimes ClinyPal adds one more step, described below.
When you're asked for a code
After a correct password, one of three things can happen, in this order of priority:
- Your clinic requires two-factor authentication and you haven't set it up yet. You're taken to Set up two-step verification and can't sign in until it's done. It takes two minutes with an authenticator app; see Two-factor authentication.
- You have an authenticator app set up. You're asked for its current 6-digit code, every time, on every device, unless you've chosen to remember the device.
- Neither of the above, but this sign-in looks new. ClinyPal emails you a 6-digit sign-in code when it's your first sign-in, when you're on a different device or browser or network from last time, or when it's been more than 6 days since you last signed in. If the code email couldn't be sent, the page says We couldn't send your code. Select Resend code to try again. and Resend code works at once. See Sign-in codes by email.
On either code page you can check Remember this device for 30 days. On that device and browser, ClinyPal then skips the code for 30 days. Only check it on a computer or phone that's yours; on a shared front-desk computer leave it off, so the next person can't sign in as you by knowing your password alone.
Other ways to sign in
- Sign in with a passkey uses your device's fingerprint, face or screen lock instead of a password and is never asked for an emailed code. You need to add the passkey first; see Sign in with a passkey.
- Continue with Google or Continue with Microsoft signs you in with that account. The first time, you confirm your ClinyPal password once to link the two. See Sign in with Google or Microsoft.
These buttons sit above the email field. Which ones appear depends on what your clinic's ClinyPal region has switched on.
What the sign-in messages mean
| Message | What it means and what to do |
|---|---|
| Invalid username or password. | The email and password don't match a password account. Check for a typo, or use Forgot password?. Someone who signed up with Google or Microsoft and never set a password gets this too; use that button, or set a password through Forgot password?. |
| Your account is temporarily locked. Try again at 2:45 PM. | Too many wrong attempts. Wait until the time shown; see Your account is temporarily locked. |
| Too many login attempts. Please try again later. | Too many failed attempts from your network in the last 15 minutes, across any accounts. Wait 15 minutes. |
| Please confirm your email address first — check your inbox for the activation link. | You haven't used the link in your invitation or sign-up email yet. Once you've entered the right password, a Send a new activation link button appears under the message and emails a fresh link, valid 24 hours. Forgot password also confirms the address when you set a new one. |
| Your account isn't active. Ask your clinic admin to activate it. | Your email is confirmed but an administrator has deactivated you, or there was no free practitioner seat when you confirmed. An administrator can activate you from Users & Practitioners. |
| Your email is confirmed — log in to continue. | Not an error: you have activated your account. Sign in normally. |
Staying signed in
Your clinic chooses how long you can leave ClinyPal untouched before it signs you out: 1, 2 or 3 hours, or never. If you come back to the sign-in page unexpectedly, that's usually why. An administrator sets it under General Settings, Security.
Other messages you may see
| Message | What it means |
|---|---|
| This sign-in step timed out. Please sign in again. | A code screen was left open too long. Start again from the sign-in page. |
| Your authenticator app is set up. Sign in again to finish. | First-time authenticator setup allows 15 minutes; the app was set up but the time ran out. Sign in again and enter a code. |
| Too many failed attempts. Use a backup code, or ask your clinic admin to reset two-factor authentication (clinic owners: contact ClinyPal support). | Too many wrong authenticator codes. A backup code still works; otherwise an administrator uses Reset on your user page, and for the clinic owner, ClinyPal support resets it after confirming who is asking. |
| If your account is in another region, we couldn't reach it just now — please try again in a few minutes. | Added to a failed sign-in when your clinic's region can't be reached at that moment. Wait a few minutes and try again; nothing is wrong with your password. |
| A link was just sent. Please wait a minute before asking again. | You asked for a new activation link twice within a minute. |