Skip to content
TDACorpIDENTITY
Latest
Sign in

Choose a password

The Choose a password screen that can appear while you sign in, why every account needs a password, and what happens when you save one.

On this page

Every TDACorp account held by a person holds a password, except accounts an organization manages. A passkey, an authenticator app and the other ways to sign in are additions to it, not replacements. If your account does not have a password yet, the sign-in stops on a screen titled Choose a password and does not go on until you set one. Its window title is Choose a password too.

The screen says Every account needs a password. Choose one to finish signing in. No session exists yet, so nothing in your account is open until you save a password.

Why you are asked#

A password is the way back in when a passkey is lost: the emailed-code option for a lost passkey (see The second step) starts from your password, and account recovery ends on one. So every account has one, and registration asks for it from the start (see When sign-up is closed or limited).

When you see it#

You see it after a sign-in that did not use a password, on an account that has none: a passkey, an emailed link or code, or Google or GitHub. It comes after any second step and any confirmation of a new browser, and before Choose an organization and Allow access. An account that has a passkey or an authenticator app proves it first, so a lone emailed link or code never sets the first password. You do not see it when you signed in with your password, when the account already has one, when a sign-in is refused, or on an account that an organization manages.

If an application tries to finish your sign-in without it, the sign-in is refused and you are asked to go back to the application and sign in again.

  1. Type a password in New password. The hint says Use a long passphrase. Pasting from a password manager works.
  2. Type it again in Confirm the new password.
  3. Select Save password and continue.
  4. The sign-in carries on to whatever comes next.

A security email is sent to every verified address on the account when the password is set. Use a different email goes back to the first screen.

What can go wrong#

What you seeWhat it means
The two entries do not match.The two passwords differ. Type them again.
That password does not meet the requirements.The password was refused. Choose another.
Too many attempts. followed by a waitRequests came too often. The page says how long to wait, for example Try again in 5 minutes.
This sign-in has endedThe sign-in took too long. Select Start a new sign-in.

Related#

Verified against commit 936c0b4