Security
How you sign in to Nudge, how to manage your password and sessions, and the controls that protect access to your workspace.
Sign-in methods
You sign in to Nudge at https://app.asknudge.ai/login with one of these methods:
| Method | How it works |
|---|---|
| Email and password | Your email address and a password of at least 8 characters. Your address must be confirmed through the email Nudge sends when you create the account. |
| Continue with Google | Your Google account. Your name is taken from it the first time you sign in. |
| Continue with Microsoft | Your Microsoft account, work or personal. Your name is taken from it the first time you sign in. |
Your email address is the identity of your account. It cannot be changed from Nudge (see My profile).
To join a workspace you were invited to, sign in with the exact address the invitation was sent to, whatever the method. See Team and roles.
Confirm your email address
After you create an account with an email and a password, Nudge sends a confirmation email. Click the link to confirm your address: you are then signed in automatically. If you did not receive it, use Resend the confirmation email on the sign-in screen.
Forgot your password
Ask for a reset link
On the sign-in screen, click Forgot password? and enter your email address.
Open the email
Nudge sends you an email with a reset link.
Choose a new password
Follow the link, enter a new password of at least 8 characters, and confirm.
If you sign in with Google or Microsoft only, reset your password with that provider.
Password and sessions
- Change your password in Settings › My profile › Password. Changing it signs you out of all your other devices: do it if you think someone else knows your password.
- Sign out in Settings › My profile › Session ends your session on the current device only.
Who can access your workspace
Several controls limit who gets in and what they can do:
- Invitations are tied to an address. An invitation can only be accepted by a confirmed account with the invited address. Links expire after 7 days and can be revoked at any time. See Team and roles.
- Domain auto-join is opt-in. Nobody joins without an invitation unless an administrator turns on Join without an invitation for your company domain. Free email domains are refused, and auto-joined members never get the Admin role. See Workspace settings.
- Roles and permissions. Each member only sees the pages and data their role allows. Admins can adjust what Managers, Closers and Setters can do. See Team and roles.
- Seats can be switched off instantly. When someone leaves, switch their seat off: they lose access to the workspace at once, and their history is kept.
- Sensitive actions are logged. The audit log records who changed or deleted what.
- Support access is limited and visible. Support sessions last at most 60 minutes, cannot touch billing or delete the workspace, and every session is announced to your administrators. See Support access.
Good practices
- Give each person their own account. Never share a login.
- Give the lowest role that lets each person do their job. Keep the Admin role for a few people.
- Review Settings › Team regularly, and switch off the seats of people who left.
- If you use domain auto-join, check new members in Settings › Team.
- Use Google or Microsoft sign-in if your company already enforces security rules (such as two-step verification) on those accounts.