Authentication settings

Open Settings > Account > Security to manage your email verification, Email/password method, passkeys, and any enabled external identity provider. These settings belong to your signed-in account.

The main Settings page can also offer email and passkey suggestions.

Verify your account email

Email verification shows the current address and verification state. If it shows Needs verification, select Send verification link, then open the newest message. Token confirmation is also available. See Verify your email for the complete workflow and recovery.

Add or update Email/password

1. Under Sign-in methods, select the plus control labeled Add sign-in method.
2. Choose Email/password.
3. Enter the account email and the password you want to use.
4. Select Save method and check the updated method list.

A password must contain 10–128 characters, including a lowercase letter, an uppercase letter, and a symbol. Follow any validation message before saving.

This action updates the existing active Email/password method if one exists; it does not add a second independent password. Changing the email also changes the account address and clears its verification until the new address is verified. Saving the same email preserves existing verification. If CareMap reports that the email is already used by another account, use your intended account's address or recover access to that other account.

If the current account information remains stale after an update, open Account > Sessions and use Refresh session, then return to Security. For a forgotten password while signed out, use password reset.

Manage passkeys

When Passkeys ready appears, Add sign-in method offers Passkey. Complete the device prompt to save it. Method actions beside an existing passkey offers Rename and Remove. See Add and manage passkeys for device support, including the desktop app's current limitation.

Link or unlink an external identity

External identity appears only when a provider is enabled. Select the provider's Link action, finish its sign-in flow, and return to CareMap. Linked entries show the provider account and last use when available.

Select Unlink to disconnect an identity. If CareMap requires verification before unlinking the last external identity, verify your account email and retry. Adding a passkey alone does not remove that verification requirement.

Remove a method or end a session

Use Method actions > Remove beside Email/password or a passkey. At least one active Email/password or passkey method must remain in this list; external identities are managed separately. Add and test a replacement before removing a method you rely on. Removing Email/password also clears the account email and its verification status; keep a working passkey before doing this.

Removing a method does not revoke sessions already signed in. Use Account sessions to end another device's access. For failed actions, read the visible error, check your connection, and sign in again if the current session has expired.