Getting started
Signing in
How to get in, the ways you can sign in, signing out, and what to do when a sign-in doesn’t finish.
During the closed beta
Only addresses on the beta list can create an account. If you sign up with one that isn’t, you’ll see Stoaken is invite-only for now, and no account is made. Your first day says how to get a place.
Invited with a different address? Choose Sign in with a different email and use that one. We sign the refused address out first, so the sign-in page really asks for an email again.
Ways to sign in
Choose Sign in at the top of any page. Signing in is handled by WorkOS, our sign-in partner, on a page in Stoaken’s colours, and you come straight back to Stoaken afterwards.
The sign-in page offers the ways that are switched on for you: usually a code sent to your email, and a password if you’ve set one. With a code there’s nothing to remember; each one works once.
Tip: API keys aren’t sign-ins. Signing out doesn’t stop a key: revoke it in Settings › Developer access (API keys) if you need to.
Signing in with your company
If your company has set up company sign-in for Stoaken, people at its email domains sign in with the company’s own sign-in (Okta, Microsoft Entra and the like): type your work email on the sign-in page and you’re sent there. There’s nothing new to remember.
The first time, Stoaken makes your account for you. It doesn’t make you a workspace of your own: you join your company’s workspaces that are open to your email domain, as a Viewer or Reviewer, and an Admin can change your role. If none is open yet, Overview says who can add you.
Once company sign-in is set up, it’s the only way in for addresses at those domains. If you try your email code, a password or Google instead, the page says your company asks you to use its sign-in, with Continue with your company’s sign-in.
Your company may ask Stoaken to check your sign-in with it once a day. You’ll see Checking with your company for a moment, and then you’re back on the page you were on. It never happens while you have unsaved changes.
Tip: API keys and connected AI tools aren’t held to company sign-in or the daily check. Each person makes and revokes their own in Settings › Developer access (API keys).
Opening Stoaken from your company’s app launcher
If your company lists Stoaken in its app launcher, choosing the Stoaken tile signs you in with your company and opens Stoaken. The first time, you may be asked to confirm the sign-in was yours. If Stoaken is already open and signed in in that browser, the tile just opens it as you; to use another account there, sign out first.
If someone else is signed in to Stoaken in that browser, the tile signs you in as yourself and signs their session here out.
Tip: If you said a sign-in wasn’t yours and you didn’t start it, tell your IT team.
Passkeys
A passkey lets you sign in with your face, fingerprint or device PIN instead of a code. Your phone or computer keeps it, and nothing secret is ever sent to Stoaken.
Passkeys are coming soon. Once they’re switched on, Stoaken offers to add one when you sign in; you can skip it. Until then, Account shows the Passkeys row as coming soon.
Tip: Lost a device? Sign it out on Account, under Where you’re signed in. Your email code and password still work, so a lost passkey never locks you out. Write to support@stoaken.com and we’ll remove its passkey for you.
Good to know: If your company signs you in to Stoaken, it decides how you sign in, so you won’t be offered a passkey.
Confirming your email
Invitations are matched to your email, so Stoaken needs to know it’s yours. A new account confirms its email with a code when it’s created.
If an invitation asks you to confirm your email first, sign in again: a code goes to your address, and you come straight back to the invitation.
Joining a workspace that already has other people in it, by invitation or through your email domain, always needs a confirmed email. Before saying no, Stoaken checks once more, so if you confirmed it a moment ago, accepting just works. Creating your own workspace never needs it.
Signing out
Choose Sign out in your menu at the bottom of the sidebar, or in More on a phone. It signs this browser out of Stoaken and out of our sign-in partner, so the next person at this computer has to sign in again.
If an invitation is for a different address, choose Sign out on the invitation. You come back to it signed out, ready to sign in with the invited address.
When a sign-in doesn’t finish
You’ll see Sign-in didn’t finish with what happened. Try again starts a fresh sign-in, and most problems (an expired link, a step you cancelled) go away on the second try. Go to Stoaken takes you to the home page, signed out.
Can’t verify the user is human: the sign-in page runs an automatic check that you’re a person. A VPN, a strict privacy extension or a blocked script can trip it. Try again off the VPN, with the extension paused, or in another browser. We can’t switch the check off ourselves, so if it keeps happening, write to support@stoaken.com.
This sign-in isn’t linked to your Stoaken owner account: the address you used belongs to the person who owns Stoaken, but isn’t the one their account signs in with. Nothing new was made. Sign in with the email the owner account uses.
Opened Stoaken from your company’s app launcher and it didn’t finish? Choose Try again to sign in from Stoaken instead.
Signing in with your company and the page says your company’s sign-in said no, isn’t switched on, or that your email isn’t on a domain your company has verified? Your IT team can see why; nothing was created in Stoaken. Signing in with your company says how it works.
If the page says your account needs one quick fix from us, you already have a Stoaken account with this address that isn’t linked to your company sign-in yet. We’ve been told and will link it, keeping your workspaces; nothing new was made.
If Stoaken opens as someone else, sign out first, then sign in with your own account.
You’re already signed in: you opened a link meant for another address (a beta invitation, say) in a browser that’s signed in as you. Choose Sign out and use that address to sign in with it, or Go to Overview to carry on as you are. Nothing changes until you choose.
If a sign-in doesn’t finish while you were already signed in, nothing changes: the page says You’re still signed in as your address, and you can carry on.
Good to know: Still stuck? Write to support@stoaken.com and say what you saw. A reply reaches a person.
Confirm it’s you
A few changes can lock people out, such as signing out everywhere else or deleting your account. Before those, Stoaken asks you to Confirm it’s you with a fresh sign-in, so nobody can make them from a browser you left signed in.
Choose Sign in again. You sign in the way you usually do (if your company runs your sign-in, it decides what to ask), and you come straight back to the same page. Press the button once more to finish. A fresh sign-in counts for five minutes.
Tip: Confirming never signs you out of anything, here or on your other devices.
Forgot your password
Forgot your password? On the sign-in page, choose “Forgot password?” and we’ll email you a link. Choose a new password and sign in with it. Choosing a new password signs you out everywhere else.
If you sign in with email codes, there’s no password to forget.