Passwordless sign-in

At 09:00 you enter your email and press Continue with email. One email lands with a Sign in button and the code 418 205.

At 09:04 you are on your laptop, where you opened the request, so you type 418205 into the code field and you are in. Had you instead opened the email on your phone, tapping the button would have signed you in there — either one works, whichever device is in your hand.

At 09:11 both are dead. Typing the code returns "That code didn't work. Try again or request a new one.", and the link lands on "This link is invalid or has expired." Pressing Resend code issues a fresh pair with its own 10-minute window; the first pair never comes back.

You give Fincanva your email address and it emails you two interchangeable ways to finish the sign-in — click the link, or type the code into the screen you are already looking at. Both are single-use and both stop working 10 minutes after the email is sent; the screen says so verbatim: "Or open the link in the email. Both expire in 10 minutes."

If the email hasn't arrived, Resend code becomes available again 30 seconds after each send, and the button counts down in the meantime. For an address with no Fincanva account, the same email doubles as account creation: opening the link or typing the code creates the account and signs you in, because continuing on the sign-in page has already accepted the Terms and Privacy Policy.

The difference is what proves it's you — control of your inbox, or knowledge of a secret you stored yourself.

Neither route is a lesser account: the same account can use whichever is at hand on the day, and two-factor authentication applies to both. A third route, Continue with Google, hands the check to your Google account — and it can also create the account, with no email to open.

Only Google and the email create an account: for a first-time visitor, either one creates it directly, and a password can be added later. Until you open the email, the sign-in page looks the same whether or not an account exists. A consent step, Let's create your account, appears only as a fallback, when a sign-in arrives without the acceptance of the Terms — for example from an older emailed link; how that step works, how long the email's proof lasts and what happens once it has run out is in accepting the Terms.

Use Forgot password? on the sign-in screen and Fincanva emails you a reset link, which is valid for one hour. Past that, the screen tells you plainly: "For security, password reset links expire after 1 hour." — request a fresh one and the old link stays dead.

If your account has no password — a new account never has one, since accounts are created with Google or by email — the same machinery sets your first one. On Settings → Access and security, the Password row shows "You don't have a password yet. We'll email you a link to set one." with a Send reset link button; open the emailed link and choose a password.

How strong does my password have to be?

A Fincanva password must be at least 8 characters long — that is the only rule the app enforces. There is no requirement for capitals, digits, or symbols.

Above that minimum the Set a new password screen, where a reset link or a first-password link lands, shows an advisory strength bar labelled "Strength:" followed by the level, which reads Weak, Fair, Good, or Strong. It reacts to length and to the mix of character types, and it never blocks you: a password rated Weak is accepted as long as it reaches 8 characters. Treat it as feedback, not a gate.