All docs

Settings

Account security

Manage your password, passkeys, and the accounts you can sign in with.

5 min read

Your Financica account is personal: it follows you across every organization you belong to, so the way you sign in is set once, on your own account, not per organization.

Accessing security settings

Navigate to Settings > User > Security. The page has three cards:

  • Password — set or change the password you sign in with.
  • Linked accounts — the sign-in methods attached to your account.
  • Passkeys — passwordless sign-in using your device.

Passkeys

A passkey replaces your password with the unlock method your device already uses: fingerprint, face, or screen lock. The secret never leaves the device, so there is nothing to type and nothing an attacker can phish.

Adding a passkey

  1. Go to Settings > User > Security and find the Passkeys card.
  2. Optionally type a name for it (for example "Work laptop"). Names make the list readable when you register several; leaving it blank is fine.
  3. Click Add a passkey and confirm with your device when it prompts you.

The passkey then appears in the list with the date it was added.

Signing in with a passkey

On the sign-in page, click Sign in with a passkey. You do not need to type your email address first: your device offers the passkeys it holds for Financica and picking one signs you in.

Removing a passkey

Click the bin icon next to a passkey to remove it. This only removes it from your Financica account; deleting it from the device itself is done in your operating system or password manager.

A passkey is an alternative to your password, not an extra step on top of it. Removing one does not lock you out as long as you still have another way in.

Password

Setting a password when you signed up with Google

If your account was created through Google, it has no password yet. The Password card then offers Email me a link to set a password instead of a change form: clicking that sends a link to your account's email address, and following it takes you to a page where you choose the password. That detour is deliberate. There is no current password to check you against, so opening your mailbox is what proves the account is yours.

Once the password is set, you can sign in with your email address and password as well as with Google. Neither method replaces the other.

Changing your password

When your account already has a password, the card shows a change form. Enter your current password, then the new one twice. Passwords must be at least 8 characters.

Sign out other devices is ticked by default. Leave it on if you are changing your password because you suspect someone else has it: it ends every other session, so a browser someone else left signed in has to authenticate again. Untick it if you are simply rotating a password and want to stay signed in elsewhere.

Linked accounts

The Linked accounts card lists every way you can currently sign in:

  • Email and password — your password credential, if you have one.
  • Google — a Google account, shown with the address it belongs to when Financica can still read it, otherwise with the date it was linked.

Link a Google account sends you to Google and back. You can link a second Google account whose address differs from the one on your Financica account, which is useful when you have a personal and a company Google identity and want either to sign you in.

Removing a sign-in method (the bin icon) does not delete your Financica account or any of your data. It only means that route no longer works: unlink Google and you sign in with your email address and password instead. The bin icon is hidden when only one method is left, so you cannot remove the last way into your own account.

If you lose access

  • You lost the device holding your passkey. Sign in with another method, then remove the passkey from the list so it can no longer be used.
  • You cannot use Google anymore. As long as you set a password beforehand, sign in with your email address instead.
  • You forgot your password. Use Forgot password? on the sign-in page. Give the address on your account and Financica emails you a link to choose a new password; the link is valid for an hour. For your protection the confirmation reads the same whether or not the address has an account, so nobody can use the form to find out who banks with us. If nothing arrives, check the spam folder and confirm you used the address the account was created with.

Keeping two independent methods on your account (a password plus a passkey, or a password plus Google) is what makes each of these recoverable.

What Financica does not offer

To be explicit, so you do not go looking for settings that are not there:

  • No two-factor authentication. There is no authenticator-app or TOTP option, and no SMS codes. Passkeys are the strongest sign-in method available, and they are a replacement for your password rather than a second factor on top of it.
  • No session or device list. You cannot see where your account is currently signed in. The only session control is the Sign out other devices checkbox when you change your password.
  • No sign-in history. Financica does not show you a log of past sign-in attempts.
  • Google is the only social provider. There is no Microsoft, Apple, or generic SSO sign-in.