Verify your sign-in by email

Email verification is required for everyone. Sign in with your own email and password, then enter the code sent to your inbox. An existing signed-in session must also verify before its next protected visit.

Enter your code

1. Sign in using your email and password.
2. Open the verification email and copy its six-digit code.
3. Paste the code into Verification code.
4. Select Verify and continue to open the page you were going to.

The code expires in ten minutes and works once. Never share it. An invitation or password-reset link does not replace sign-in verification: after setting your password, sign in normally.

Sign in with a passkey

A passkey lets you sign in with your fingerprint, face or device PIN instead of your password. It replaces only the password: a browser you have not trusted still asks for the email code.

1. Sign in, open the account menu in the upper-right corner and choose Security.
2. Under Passkeys, select Add a passkey and follow your device's prompt.
3. Next time, select Sign in with a passkey on the sign-in page.

You can rename or remove a passkey on the same page. A removed passkey can no longer sign in. Passkeys work only at app.mendiola.io, not at other addresses for Mendiola.

Trust a personal browser

Select Trust this browser for 30 days before verifying only if you control the device. It is unchecked by default. You still need your password or a passkey, but that browser can skip the email code until its trust expires.

Do not select this on a shared computer. Signing out keeps the trust you chose; revoking it removes that permission.

Revoke trusted browsers

Open the account menu in the upper-right corner and choose Security. Every user can manage their own browsers here, including members.

Choose Revoke beside a browser or Revoke all. Sessions that used that trust must verify again before their next protected action. Changing your password or email also invalidates browser trust.

A code does not arrive or no longer works

Check your inbox and spam folder. Use Resend code when its countdown finishes; only the newest code for that sign-in works. If the page says the code may have been sent, check your inbox before requesting another.

Repeated guesses or resend requests cause a waiting period. A correct code cannot unlock an exhausted challenge; request another when allowed. An unavailable email service leaves sign-in blocked until delivery is restored.

If you lose access to your inbox, contact your firm's administrator to arrange an identity check and account recovery. There is no switch here to turn verification off.