Signing in

How do I sign in?

Tovari accepts three kinds of sign-in, and all three work in the web app and in the mobile app:

• Email and password — the account you create with an email address and a password.
• Google — sign in with a Google account.
• Apple — sign in with an Apple account.

They are not separate accounts. All three lead to the same Tovari account as long as they carry the same email address.

Choosing a password

A Tovari password must be at least 8 characters. The signup form shows the requirements as you type, along with a strength indicator, so you can see when a password is accepted before you submit it.

Signing in with Google or Apple on an account that had a password

This is the one behaviour worth reading before it happens to you.

If you created your account with an email and password and later sign in with Google or Apple, Tovari links the two to the same account rather than refusing you or creating a duplicate — but your old password stops working. Tovari tells you so at the time:

Password sign-in for this account was reset when you signed in. To sign in with your email and password again, use “Forgot Password” to set a new one.

Nothing in your data changes, and you stay signed in. If you intend to keep using a password as well, set a new one when it suits you; if you plan to use Google or Apple from now on, there is nothing to do.

Signing in with Google or Apple after accepting a household invitation

An account created by accepting a household invitation isn’t confirmed until you verify your email. Until then, Google and Apple sign-in are refused for that email, and Tovari tells you to sign in with your email and the password you set when you accepted, verify your email, and then use Google or Apple. If you didn’t accept an invitation, contact support. For the same reason, Forgot Password can’t be used to get into an unconfirmed invitation account; the code is simply rejected.

Signing in with Apple using Hide My Email

If you sign in with Apple using Hide My Email and Tovari can’t tell whether you already have an account — no Apple sign-in on file and no matching email — you’re asked to choose:

• Create a new Tovari account — sets up a new account, same as any other first-time sign-in.
• I already have a Tovari account — nothing is created. You’re sent to sign in with the email and password you already use; Sign in with Apple can’t be added to that account yet.

Nothing is created until you choose. If the confirmation screen sits too long, it times out and asks you to sign in with your email and password instead.

Forgot your password?

Choose Forgot Password on the sign-in screen and Tovari emails you a code to set a new one.

When a reset succeeds, Tovari also signs the account out everywhere else, so any session opened before the reset ends.

Tovari’s account emails are branded, but if that branding ever fails to render, the message is sent in its plain form instead of not being sent at all — a reset is never blocked by how the email looks.

Web

Signing in

The sign-in screen offers the email and password fields, with Google and Apple buttons beneath them. If a sign-in method is not configured for your Tovari deployment, its button is not offered rather than failing when you press it.

Creating an account

Sign up collects your name, email and password, with the password requirements and strength meter shown as you type. After signing up you are taken through getting set up — adding your first account and the budget interview.

Staying signed in

Tovari keeps you signed in between visits and renews your session in the background, so a long session does not drop you back to the sign-in screen mid-task.

If you open a link into the app while signed out — say, a link in an email — Tovari asks you to sign in first, then takes you to the page the link pointed to, whichever of the three ways you sign in.

Signing out

Sign out from your account menu. It ends the session on this device.

On a phone browser

Sign-in, sign-up, password reset and the two-factor code in a phone browser use the mobile app’s screens.

On an iPhone or an Android phone, Tovari offers its app once you are signed in. You see this after you sign in, sign up or enter your two-factor code, once any email-verification, policy or plan step is done. Get the app opens Google Play on Android, or Apple’s TestFlight on iPhone, in a new tab. Continue here keeps you in the browser. Reloading the page does not bring the offer back; it appears again only the next time you sign in. It is not shown on tablets or in the desktop layout.

Mobile

Signing in

The app’s sign-in screen offers the same three methods: email and password, Google, and Apple. Apple sign-in uses the system sheet, so it works with Face ID or Touch ID.

Creating an account

You can sign up in the app. It collects the same details as the web app and applies the same password rules, then takes you through the same setup steps.

Unlocking with Face ID or Touch ID

If your device has Face ID or Touch ID set up, the app offers to skip your password on future sign-ins. You will see the checkbox on the sign-in and sign-up screens (checked by default when you sign up), and a prompt offering to turn it on the first time you sign in without it. If you unchecked it while signing up, that prompt is one of the numbered sign-up steps, right before you add your accounts. Saying no makes the offer stop for good; if the scan itself doesn’t go through, you may see the offer again on your next couple of sign-ins before it stops. From then on, opening the app shows an unlock screen instead of the sign-in form — a successful scan gets you straight in, and “Use password instead” is always there if you would rather type it.

This only works on this one device, and only where a biometric is already enrolled with the OS. Turn it on or off any time from Settings → Security. It is a faster way back into an account you are already signed into — it is not a replacement for two-factor authentication, which still runs at sign-in exactly as before.

With Face ID or Touch ID turned on, the app also locks every time you switch away from it, not just when you first open it. Switching to another app, or even glancing at the app switcher, blanks the screen so no account details are visible in the preview; coming back always asks for another scan before you see anything, with “Use password instead” still there if you would rather sign in again that way. There is no grace period — this happens every time, however briefly you were away.

If you have two-factor turned on

Signing in asks for your six-digit code on a dedicated screen after your password is accepted. See two-factor authentication.

Getting back in

The sign-in screen has its own Forgot? link next to the password field, and if a few failed attempts have locked you out for a few minutes it also offers a Reset my password button right there in that locked-out state — resetting your password doesn’t wait out the lockout.

Either one opens the same in-app reset flow: enter your email, enter the 6-digit code Tovari emails you, then choose a new password with the same requirements and strength meter shown at signup. If a code expires before you use it, the app offers to send a new one without starting you over on the email step. Finishing takes you back to the sign-in screen with your new password active; your device’s password manager offers to save it, same as it would on any other app.

Signing out

Sign out from Settings. It ends the session on the device and returns you to the sign-in screen.

Related pages

• Email verification — confirming your address after you sign up.
• Two-factor authentication — adding a second step.
• Getting set up — what happens after your first sign-in.
• Where each feature works — what is available on which platform.

Sources

• What is Sign in with Apple? (Apple Support)
• How to use Hide My Email with Sign in with Apple (Apple Support)