This article is auto-synced from its in-app version in Tai.
Set a strong password and protect your account with two-factor authentication.
When you'd use this
You received an invitation email and need to create your first password.
You want to change your existing password.
You want to enable two-factor authentication (2FA) for extra security.
Steps
Set your password (first time)
Open the invitation link from your email.
Enter a password in the New password field. Aim for at least 12 characters — a short passphrase (a few random words) works great.
Re-enter it in the Confirm password field.
Click Create account.
Change your password
Click your avatar in the bottom-left corner of the sidebar, then click My Account.
In the Password section, enter your current password.
Enter your new password and confirm it.
Click Change password.
Enable two-factor authentication
Go to My Account (avatar → My Account).
In the Two-factor authentication section, click Enable.
Scan the QR code with your authenticator app (e.g. Google Authenticator, 1Password, Authy).
Enter the six-digit code from your authenticator app to confirm.
Save the recovery codes in a safe place — you'll need them if you lose access to your authenticator.
Tips and limits
Length matters most. TAI requires at least 8 characters but recommends 12 or more. There are no special character requirements — a longer password made of everyday words is stronger than a short one full of symbols.
Try a passphrase. String together three or four random words (e.g. "correct horse battery staple"). It's easy to remember and hard to guess.
There's a maximum length of 72 characters. Only the first 72 characters are used, so there's no benefit to making a password longer than that — and any practical password is well within the limit.
Turn on 2FA. A password alone can be compromised. Two-factor authentication adds a second layer that protects your account even if your password is leaked.
Use a password manager. Tools like 1Password or Bitwarden generate and store strong passwords so you don't have to remember them.
Related
Managing users — invite users and manage their roles.
Single sign-on — configure SSO so users sign in with their company identity provider instead of a password.