> ## Documentation Index
> Fetch the complete documentation index at: https://help.trytuuli.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication: Accounts, Sign-In, and Sessions

> Learn how to create an account, sign in, reset your password, sign out, and understand how RFI Manager manages your session across browser visits.

RFI Manager uses email and password authentication to protect your organization's data. Every account is tied to a verified email address, and your session persists across browser tabs and restarts so you don't have to sign in repeatedly. This page covers everything you need to know about creating and managing your account — no prior knowledge of the underlying infrastructure required.

## Creating an account

To use RFI Manager, you first need to register with your email address.

<Steps>
  <Step title="Open the sign-up page">
    Navigate to `/auth/signup`. You can also reach it by clicking **Sign up** on the sign-in page.
  </Step>

  <Step title="Fill in the registration form">
    Provide the following:

    * **Full Name** — Your display name within the platform.
    * **Email** — The address you'll use to sign in and receive notifications.
    * **Password** — Must be at least 6 characters long.
    * **Confirm Password** — Re-enter your password to catch typos.

    Click **Create account** when ready.
  </Step>

  <Step title="Confirm your email">
    RFI Manager sends a confirmation link to the email address you provided. Open the email and click the link to activate your account.

    <Note>
      If the email doesn't arrive within a few minutes, check your spam or junk folder. The confirmation link is required before you can sign in.
    </Note>
  </Step>
</Steps>

## Signing in

Once your account is confirmed, sign in at `/auth/login`.

Enter your **Email** and **Password**, then click **Sign in**. After a successful sign-in, RFI Manager takes you through the onboarding flow (for new accounts) or directly to your organization (for returning users).

<Warning>
  If you see an "Invalid login credentials" error, double-check that your email address is spelled correctly and that you're using the password you set at sign-up. Passwords are case-sensitive.
</Warning>

## Resetting a forgotten password

If you can't remember your password, you can request a reset link.

<Steps>
  <Step title="Go to the forgot password page">
    On the sign-in page, click **Forgot your password?** — or navigate directly to `/auth/forgot-password`.
  </Step>

  <Step title="Enter your email address">
    Type the email address associated with your account and click **Send Reset Link**.
  </Step>

  <Step title="Open the reset email">
    RFI Manager sends a password reset link to your inbox. Click the link — it opens the password reset form at `/auth/reset-password`.

    <Warning>
      Reset links expire after a short period. If the link has expired, return to `/auth/forgot-password` and request a new one.
    </Warning>
  </Step>

  <Step title="Set a new password">
    Enter and confirm your new password, then submit the form. You'll be redirected to the sign-in page and can immediately sign in with your updated credentials.
  </Step>
</Steps>

## Signing out

To sign out, open the user menu (typically in the top-right corner of the application) and click **Sign out**. Your session is cleared immediately and you are redirected to the sign-in page.

<Tip>
  Sign out when using a shared or public computer to prevent other people from accessing your account.
</Tip>

## Protected routes

Every page inside the RFI Manager application requires authentication. If you try to visit a protected page while signed out — or if your session expires — the application automatically redirects you to `/auth/login`.

After you sign in, you are taken back to the page you originally requested, so you don't lose your place.

## Session management

Your session persists automatically across browser tabs and restarts. You do not need to sign in again each time you open RFI Manager, as long as your session remains active.

<Note>
  Sessions are managed securely and do not require any action on your part. If you want to end your session explicitly, use the **Sign out** option described above.
</Note>