Your profile, password and 2FA
Personal settings for your own login: name and email, password, two-factor authentication, recovery codes, appearance, and deleting your account.
Updated · JoinCPR help center
Your personal settings live in the user menu (bottom of the sidebar) → Settings, with three pages: Profile, Security and Appearance. These pages work even when your business account is locked for billing.
The same name, email and password fields also appear on Settings → General in the Account Settings and Change Password cards.
Logging in
- The login page is
app.joincpr.com/login. Students and corporate clients log in on your student portal instead. - After five failed attempts in a minute you must wait before trying again.
- Forgot your password? emails a reset link. The link expires after 60 minutes.
- A login that has been deactivated by JoinCPR is refused with "Your account has been deactivated."
Profile
Update your Name and Email. The email must not be in use by another JoinCPR login. Click Save; "Saved." confirms it.
Security: changing your password
Enter Current password, New password and Confirm password, then Save. If anything is wrong all three fields clear so you can start again.
Password rules: at least 12 characters, upper and lower case, a number and a symbol, and not a password that has appeared in a known data breach.
Two-factor authentication (2FA)
Turning on 2FA means every login also asks for a six-digit code from an authenticator app (Google Authenticator, 1Password, Authy and similar).
- Open Security. Because this is a sensitive area you may first be asked to confirm your password (once every three hours).
- Click Enable 2FA. A window shows a QR code and a manual setup key.
- Scan the code in your authenticator app, click Continue, then enter the six-digit code the app shows and click Confirm. 2FA is only active once a code has been confirmed; abandoning the window leaves it off.
- Click View recovery codes and store them in a password manager. Each code works once and lets you in if you lose your phone. Regenerate codes replaces the whole set.
At login, after your password you are asked for the authentication code. The link "login using a recovery code" switches to a recovery-code field.
Disable 2FA turns it off immediately.
Tip
Administrators handle billing and team access, so 2FA is strongly recommended for every admin login.
Appearance
Choose Light, Dark or System. The choice is stored in your browser, so it applies per device.
Deleting your account
At the bottom of Profile, Delete account permanently deletes your own JoinCPR login after you confirm your password. This is irreversible.
Caution
Deleting your login does not delete your business's data, but nothing stops the only administrator from deleting themselves. If you are the sole admin, promote someone else under Staff & Instructors first, or you will lock the business out of billing and team management.
Email verification
Sign-up and invitation flows verify your email automatically. Changing your email later does not block access.