Updated 2026-07-09 · Prospect, Member
Login errors are intentionally generic for security, but forgot-password and confirmation issues each have a clear fix. This article walks through both.
If your email or password doesn't match, you'll see a simple 'Incorrect email or password.' That message is deliberately generic: it doesn't tell you whether the email exists in our system at all, which is a basic security protection, not a bug.
If your email address hasn't been confirmed yet, you'll see a different message with a 'Resend confirmation email' option, so you can get a new link without starting over.
If your link says 'Invitation Link Expired' instead of something about password resets, that's expected: the same link mechanism is also used when an account owner or admin invites someone to the platform. It's just shared wording, not a sign something went wrong.
Reset links do expire. If yours has, just go back to /forgot-password and request a new one.
Why won't it tell me if my email is registered?
It's a deliberate security choice. Both sign-in errors and forgot-password requests use generic wording so no one can use them to check which emails have accounts.
I never got a confirmation email, what do I do?
Use the 'Resend confirmation email' button, which appears on both the post-signup screen and the unconfirmed-email sign-in message.
My reset link says 'Invitation Link Expired', is that a bug?
No. That page is shared between password resets and account invitations, so the wording says 'invitation' either way. Just request a fresh link from /forgot-password.
What are the password rules when I reset it?
At least 8 characters. That's the only requirement on the reset screen.