If sign-in asks for an authenticator code, retry a mistyped code on the same screen. Repeated attempts can require a short wait; follow the displayed delay. After five minutes at most, go back and start sign-in again. Two-factor remains optional unless your organization requires it. Deleting a project, organization, or your own account can use an emailed code when you have no authenticator enrolled. The deletion dialog sends that code when it opens and offers a new code if needed, subject to the same temporary retry limits.
Removing or replacing your profile picture updates your profile immediately. Account deletion removes your profile, and deleted project or organization pages go offline immediately. Unused uploaded image files are cleared in the background.
First sign-in
New users land on onboarding after sign-in. You create your organization name and URL slug (used in sourcetrust.app/your-org/...), confirm the timezone (preset from your browser), and optionally require two-factor for all members. You become the owner of that org.
Use the same email across sign-in methods (Google, GitHub, Microsoft, password, or a sign-in code). Verified email addresses link those methods into one account. On return visits, this device shows a Last used badge on the method that last worked. If you are unsure which method you used, choose Sign in with an email code and we will send a one-time code to that address.
Multiple organizations
- Use the org switcher at the top of the sidebar to move between orgs you belong to.
- Create another org from the switcher (you will go through onboarding again with ?new=1).
- Each org has its own projects, members, billing, and optional custom domain.