Logging into your Account

Open Collective uses a password less system by default but you can choose to log in with a password if you prefer.

Open Collective uses a passwordless system to log you into your account initially. You can choose to set a password after your initial registration and log in with that instead.

Why Passwordless?

Passwords don’t always make things more secure. Users frequently reuse passwords or create ones that are easy for fraudsters to guess. Passwords are also more vulnerable to phishing, a type of fraud in which someone tricks you into revealing your password.

How passwordless works

Passwordless systems use a “magic link,” which is sent directly to your email. It is a system trusted by companies such as Slack, Monzo, Notion, and Scaleway for its ease and security.

When you type your email into Open Collective's sign-in box, the system will identify you as an existing or new user.

If you have an account, we'll send you an email with a unique link that logs you in to Open Collective. You will stay logged in on that device for 30 days.

If you're a new user, you'll be asked to create an account.

Setting a password

If you’d prefer to set a password, navigate to your Dashboard > Settings > Security. You will then be asked for your email and password each time you sign in. If you forget your password, you can reset it or ask for a link to be sent to your email account.

To maintain your security, we recommend using a password manager to set and store passwords you create.

New device sign-in notifications

If you sign in with a password from a device or location we have not seen before, Open Collective sends a security email to your account address. The email includes the date and time of the sign-in, the IP address, and the device or browser used.

If you recognize the sign-in, no action is needed. If you do not recognize it, use the link in the email to review your security settings and consider changing your password or enabling two-factor authentication.

This notification is only sent for password-based sign-ins. Magic link sign-ins do not trigger this email.

Two-factor authentication

You can further improve your account security by enabling Two Factor Authentication (2FA) on your Open Collective account.

If you are managing money on behalf of a community, we highly recommend enabling Two-factor authentication (2FA) on your account. This provides you with an extra layer of security if your password is compromised.