Getting in
- Email and password is the usual way. New accounts get a confirmation email first — click the link to activate.
- Prefer no password? Ask for a one-time sign-in link and it arrives by email.
- Google sign-in is offered where it has been set up.
Adding a second step
Two-step sign-in means that after your password you also enter a six-digit code from an authenticator app on your phone. Someone who learns your password still can’t get in. You set it up in Settings, under Security, by scanning a QR code with the app.
Save the recovery codes you are shown when you turn it on, somewhere that isn’t your phone. If you lose the phone and the codes, getting back in means proving who you are to us, which takes time.
On a Team plan, an owner can require two-step sign-in for everyone in the workspace.
XOsign provides AI-assisted document tools and is not a law firm. This article is general product information, not legal advice.