Sign in & security

Taiga Finance has no password. You sign in with a link sent to your email, or with Continue with Google when Google is connected to the account, and the same form creates an account for an address that has none. Because the inbox is the credential, the account’s guards live in Settings › Security: the Sign-in methods row where Google is connected or disconnected, Sessions to sign out everywhere, an optional device lock, a Recent account activity log, and a record of every support-access window. Before a step that hands over data or access, Taiga Finance asks you to confirm it’s you again, in place, without losing what you were doing.

What is a sign-in method?

A sign-in method is a way to prove the account is yours. Every account starts with one, Email link: a message to your address with a link and a code. Connecting Google adds a second, so an account can still be opened when one inbox is lost. The Sign-in methods row says which ones the account has, and its help line is blunt about the risk of having one: With one way to sign in, losing that inbox means losing the account.

How do I sign in?

1. On the sign-in page, type your address under Email and click Send sign-in link. The page changes to Check your email and says If [your address] can use Taiga Finance, a sign-in link is on its way. The wording is the same whether an account exists.

2. Open the email and click the link. Taiga Finance signs you in on the device where you opened it. If you are on another device, the email also carries a code shaped like ABCD-EFGH; type it under Sign in with code on the Check your email screen instead.

3. If the address had no account, opening the link creates one. The first screen afterwards is Terms and privacy, where you agree to the Terms of Service and Privacy Policy before anything else.

When Google is connected to the account, Continue with Google above the email form signs you in without an email. A Google address with no account of its own creates one, the same as an emailed link does.

The email form carries a bot check. When it can’t load, the page says so: The bot check didn’t load, so this browser can sign in to an existing account but can’t create a new one. An existing account is never blocked by it.

How do I connect Google as a way to sign in?

1. On Settings › Security, open Sign-in methods. The row’s summary lists what the account has, for example Email link.

2. Click Connect Google. If you signed in a while ago, the Confirm it’s you dialog comes first.

3. Pick the Google account on Google’s screen. Taiga Finance returns you to Settings with the toast Google is connected as a way to sign in., and the row now reads Google · Email link.

A Google account already connected to a different Taiga Finance account is refused: That Google account is already connected to a different Taiga Finance account.

To remove it, click Disconnect beside the method. The dialog states what still works, It no longer signs you in — Email link still does, and that every other session ends while this one stays. The last method can’t be disconnected: That’s the only way to sign in to this account.

What does “Confirm it’s you” mean?

Some steps hand your data or your access to someone else, or delete it: a bulk export, a household invite, making the other member admin, an email change, connecting Google Sheets, a wipe, and a delete. Before one of those, Taiga Finance checks how recently you proved the sign-in. If it was a while ago, a Confirm it’s you dialog opens over the page. Nothing navigates away, and the step you started waits.

• Email me a code sends a code to your current address. Type it under Verification code and click Verify. The step then runs on its own. Send a new code appears after a short wait.
• Confirm with Google shows when Google is connected. Google opens in its own window; the dialog reads Finish in the Google window. When Google confirms, the window closes and the step runs. If Google doesn’t, the dialog returns to the two choices with Google didn’t confirm. Try again, or email a code.

Cancelling the dialog cancels the step and changes nothing. Someone who signed in moments ago never sees it.

How do I change my email address?

1. On Settings › Account, open Email and type the new address. The help line explains the two messages that follow: We’ll send a code to the new address to confirm it, then a lock link to your current one so a mistaken or malicious change can be undone.

2. Click Save. The row now reads Pending: with the new address masked, and offers Enter code and Cancel.

3. Type the code from the new address and click Confirm. The toast reads Email changed. We sent a lock link to your old address.

The lock link in the old inbox reverses the change if it wasn’t yours. While it is live, the account can’t be deleted. A second change right after the first is held: Email changes are paused for a few days after a recent change or lock.

How do I sign out everywhere?

On Settings › Security, the Sessions row has two buttons. Sign out ends this session. Sign out everywhere opens a confirmation, This ends every active session, including this one. You’ll sign in again from the sign-in page., and ends them all.

Disconnecting a sign-in method also ends every other session, as its dialog says.

How do I lock Taiga Finance on this device?

The Lock Taiga Finance on this device switch in Settings › Security turns on a device lock. The help line says what it does: Every time you open Taiga Finance, it asks for Face ID, your fingerprint, or your device passcode first. It is per device, not per account, and it uses a passkey the device creates when you turn it on. Auto-lock after sets how long the app stays open before asking again: Immediately, 1 min, 5 min or 15 min.

Below the switch, every device that enrolled a passkey is listed, this device or not, each with a Remove button. Removing one means The device that enrolled it loses its app lock and re-enrolls from scratch. Nothing else changes. On a device with no face, fingerprint or passcode, the switch is off and the line under it says why.

What does Recent account activity show?

Settings › Security › Recent account activity opens to a list of the security events on the account: signing in, signing out everywhere, confirming it’s you, a bank connection linked or removed, a sign-in method added or removed, an email address changed or reverted, and household changes such as a member added, removed, or leaving. It is the place to look when something about the account seems different, and it reads No recent activity until there is some.

Support access, the row below it, lists every window in which you let a maintainer open the account read-only, with the reason and the dates. It reads Never opened until you grant one from a problem report. Report a problem covers how that access is granted.

What if I lose access to my email?

The sign-in page has a line for this case. Under Lost access to your email? it says what is left. If Google was connected to the account, Continue with Google signs you in, and the address can then be changed in Settings › Account. Otherwise there is no way to prove the account is yours: support can’t move it, and a new account is the way forward. Connecting Google while you still have the inbox is the one preparation that changes this outcome.

Troubleshooting

“That code didn’t work — it may have expired. Request a new link and use the fresh code.”

The code belongs to a sign-in email that has expired, or it was mistyped. Send a new sign-in link from the sign-in page and use the code in the newest email. That code has already been used means the same: each code works once.

“Too many requests. Wait a few minutes and try again.”

The sign-in page limits how many links one address or one network can ask for in a short time. Wait a few minutes before asking again.

“The bot check didn’t load, so this browser can sign in to an existing account but can’t create a new one.”

Before the sign-in page creates a new account by email, it runs a check from Cloudflare, and that check’s script did not load in this browser. A content blocker or privacy setting that stops challenges.cloudflare.com is one cause. Reload the page; if the line comes back, open the sign-in page in a browser without the blocker. A sign-in link to an account that already exists still sends.

“Google sign-in didn’t work. Try again, or use a sign-in link below.”

Google’s round trip failed partway. Try Continue with Google again, or send a sign-in link to the account’s email. Google sign-in was cancelled. means the Google screen was closed before it finished.

“Confirmed it’s you. The step you started before Google didn’t run — start it again.”

Your browser blocked the Google popup, so the confirmation ran as a full-page round trip instead. The confirmation held, but the step that asked for it was lost on the way. Start it again; it runs without asking this time.

“Google wasn’t connected — the sign-in session changed partway. Try again.”

You signed out, or signed in elsewhere, between clicking Connect Google and returning from Google. Open Sign-in methods and click Connect Google again in one sitting.

FAQ

Can I set a password?

No. Taiga Finance signs you in with an emailed link or code, or with Google. There is no password to set, reuse, or leak.

Does signing in on a new device sign me out elsewhere?

No. Sessions are independent until you end them. Sign out everywhere ends them all at once, and disconnecting a sign-in method ends every session except the one you are in.

Does the device lock protect my account?

It protects the device. The lock asks for your face, fingerprint or passcode before the app opens on that device. It is not a sign-in: a second device with its own session opens without it, and removing the passkey changes nothing about the account.

Does my household member see my sign-in methods?

No. The Security band is per person. Their Recent account activity records household events, such as a member added or removed, not how you sign in.

Can I use a different email for Google than for the account?

Yes. The Google account you connect is a sign-in method; it doesn’t have to match the account’s email address. The help line under two methods says so: Any one of these signs you in; the email address can be changed from any of them.