herbeID

Sign-in methods

Emailed link or code, passkey, your work Microsoft account or eParaksts. There is no password to remember, reuse or lose.

No passwords, and still careful

Every way in follows the same rule: no invitation, no access.

A link or a code

We email a one-time link and a code. Either one signs you in, once, and both expire after 15 minutes.

A passkey

Your fingerprint, face or device PIN. It needs no email and no code, and it counts as both steps of two-step sign-in.

A second step, if you add one

Switch on an authenticator app and the link is followed by a six-digit code. You get ten recovery codes to keep safe.

Each person picks the door that suits them

Microsoft and eParaksts appear only where they are switched on for your herbe ID, and the Microsoft button shows up once the person has typed their address.

  • No passwords and no self-registration: you exist on herbe ID because someone invited you
  • A sign-in renews while you use it, ends after a day without use, and never lasts more than 30 days
  • Switch off someone's access and every way in closes, passkeys and eParaksts included
  • Sign out everywhere ends every sign-in and every app connection you have, on every device
  • Microsoft work account

    Press Sign in with Microsoft and use the account you use at work.

  • eParaksts

    Link your Latvian eParaksts once, then identify yourself with it.

  • Passkeys, named and listed

    Each passkey shows its name, when you added it and when it was last used.

How to start

  1. We create your organisation

    It lives on herbe ID, and your apps are registered under it.

  2. You invite your people

    Each person gets an email with a link to the sign-in page.

  3. Everyone signs in their own way

    Link, code, passkey, Microsoft or eParaksts: each person adds what suits them.

Questions about signing in

Is there a password?

No. People sign in with an emailed link or code, a passkey, a work Microsoft account or eParaksts. Nobody can register themselves.

What counts as the second step?

A passkey counts as both steps on its own. With an authenticator app switched on, the emailed link or code is followed by a six-digit code from the app. Microsoft and eParaksts sign-ins ask for no authenticator code.

I lost my phone. What now?

Use one of your ten recovery codes to sign in, turn the authenticator off and set it up again on the new phone. With no recovery code left, ask your organisation's admin to reset your authenticator. A lost passkey is not recoverable by us: sign in with the emailed link and add a new one.

Does the emailed link work in another browser?

Open the link in the browser where you asked for it, or type the code on the sign-in page. The link and the code each work once.

How long does a sign-in last?

It renews while you use it and ends after a day without use. Whatever you do, it ends after 30 days.

See it with your own team

30 minutes, live, around the way your people sign in today.