JustOnce has no passwords. You sign in with Google, Microsoft, or a one-time code sent to your email — on the website, and in the sign-in window your AI app opens when you connect it. Sign-in is handled by Auth0 on our behalf; JustOnce never sees a Google or Microsoft password.
The email code
Sent from JustOnce <[email protected]>, subject "123456 is your JustOnce sign-in code".
Six digits, valid for 10 minutes, single use. Only the most recent code works.
After a few wrong tries that code stops working; ask for a new one. Repeated failures pause sign-in for safety.
One account, one method
Your account is tied to the method you first used. If you later try a different one with the same email, JustOnce tells you which method to use instead — see "I already have an account with this email".
Keeping it safe
Whoever controls your email or your Google/Microsoft account can sign in as you — unless you turn on two-step sign-in. New accounts start with it off. (Until October 2026 JustOnce asked everyone to set up an authenticator app when they signed up; if you did, it's already on.)
To turn it on, open Settings → Profile → Two-step sign-in, sign in again, then add an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password…) or a security key. From then on, signing in on a new device or browser, or after a few days away, asks for that second step too. Once it's set up, a phone or computer with Face ID, Touch ID, Windows Hello or a fingerprint reader can use that instead of a code. Tick Remember this device and that device skips it for 30 days.
You'll be shown a recovery code when you turn it on. Keep it somewhere safe: it's how you get in if you lose your phone. Lost both, or want two-step sign-in turned off? Contact [email protected].
Protect your email and your Google/Microsoft account with their own two-factor authentication as well. What your connected assistants do in your vault shows in your Ledger.