Skip to content

Part 2 · Set up

Signing in

Google or a link from your inbox, never a password. A new address on the plan flow is signed in at once.

01What it is

There is no password anywhere. You sign in with Google, or with a one-time link sent to your inbox. On the free plan flow, giving a new address makes your account and signs you in on the spot, so the plan you are waiting for is already yours. Confirming the address later, from the plan email or by signing in with Google, lets you sign in on other devices.

02Why it exists

Every extra step between "here is your plan" and "run this plan" loses people who wanted it. So the account is made the moment the address is given, and nobody meets a sign-in page or a "verify your email" wall on the way.

The price of that is a door anybody could walk through with somebody else's new address. It is closed at the first real proof: when the owner confirms, every other session ends, and they see what the account already holds, with a reset if any of it was not theirs.

03How to use it

  1. 01Give your email on the plan flow. A new address is signed in at once; an address that already has an account is never signed in from there, so use Google or a link from your inbox.
  2. 02Open "Open my plan" in the plan email. It signs you in and confirms your address, so you can sign in anywhere afterwards.
  3. 03On the sign-in page, after asking for a link, wait for the countdown before asking again. The first link is on its way, and Google is on the same screen.
  4. 04If a link has expired or was opened in another browser, the page says which and lets you send a new one in one click.
  5. 05Settings has Sign out everywhere, which ends every session on every device.

04What good looks like

You give it
A founder gives their own new address on the homepage, reads the plan signed in, and opens the plan email on their phone the next morning.
You get
The phone signs in and the address is confirmed. Nothing else changes, and a one-time notice lists the plan and venture they made, with This was me.
Why
The email link is the proof. The account was theirs from the start, so the notice is a single tap.

Example data, from the demo workspace

05What weak looks like, and what it costs

You give it
Somebody types a stranger's new address on the homepage and keeps the session it gives.
You get
They can use that account until the stranger confirms. On confirmation their session ends, any mailbox they connected that is not the stranger's address is disconnected, and the stranger can reset everything made before, with any payment refunded.
Why
Signing in on typing trades proof for speed, so proof is enforced the first time it arrives, and an existing address never gets a session from typing at all.

Example data, from the demo workspace

06Read next