Skip to content
Costimate
Start free
All pages

Your profile and sign-in

Your own profile, your password, two-factor authentication and passkeys. What each one does, and who reads what is on your profile.

Your profile and how you sign in are your own: nobody else changes them. Both are in your account menu at the top right, under Profile and Security. For how Costimate keeps each company's data apart, see Security and your data.

Signing in

The sign-in page: email and password, Remember me, Forgot password? and Sign in with a passkey.
  1. Forgot password? emails you a link to choose a new one. The link works for 60 minutes.
  2. Sign in with a passkey, once you have added one. Your browser may also offer it when you click the email field.

Your profile

The top of a person's own profile: what is still missing, their account with its photo, and how they sign in.
  1. What your profile still misses. It is a reminder: nothing stops you saving without it.
  2. Edit changes your name, job title, phone and country.
  3. Change photo takes a picture of at most 5 MB.
  4. Change email changes the address you sign in with.
  5. Security holds your password, your sign-in codes and your passkeys.

Further down:

  • About: a short bio and the languages you speak, each with its level.
  • Positions, Education and References: the roles you have held, where you studied, and the tenders or projects you contributed to.
  • Companies: each company you belong to, and your role in it.
  • Privacy: Usage analytics is on until you switch it off. Learn more says what is measured and what never is.

In a company you share, members who can open Team read your job title, email, phone, country, about, positions, education and references, and when you last signed in. An expert's profile has its own parts, and companies read it in the experts directory without the address and the phone. Join the Costimate Expert Network says more.

Changing your email

  1. Choose Change email, then type the New email and your Current password.
  2. Costimate sends a link to the new address, and a notice to the old one.
  3. Open the link within 60 minutes. Until you do, you keep signing in with the old address, so a mistyped address locks nobody out. Cancel on the card stops the change.

Your password

Under Security, Change password asks for your Current password, a New password and Confirm new password. A new password needs at least 12 characters, with upper and lower case letters, a number and a symbol, and one known from a data leak is refused.

You stay signed in on this device, and your other devices are signed out. You cannot remove your password, even with passkeys: it is how you get back in if you lose your devices.

Two-factor authentication

With this on, every sign-in with your password also asks for a 6-digit code that Costimate emails you.

The Two-factor authentication card: email verification codes, whether they are on, and the switch.
  1. Email verification codes, and whether they are on. The codes go to the address you sign in with, and expire after 10 minutes.
  2. The switch turns them on or off. It asks for your password first.

At sign-in, type the code under Verification code. Send a new code sends another, and Use a passkey instead replaces the code if you have a passkey.

Passkeys

A passkey signs you in with your fingerprint, your face, your screen lock or a security key instead of your password. It counts as both steps, so no code is asked. Nothing of your fingerprint or face reaches Costimate.

The dialog Add a passkey: a name to tell it apart, and Create passkey.
  1. A name, so that you can tell it apart. Costimate starts it from your device.
  2. Create passkey hands over to your browser, which asks for Windows Hello, Touch ID, your phone or a security key.

Adding a passkey asks for your password, unless you typed it or used a passkey in the last ten minutes. With two-factor authentication on, if this sign-in passed no code, Email me a code comes first, so that a passkey is never a way round the code.

The Passkeys card with one passkey on it: its name, Synced, when it was added and last used, Rename, Remove and Add a passkey.
  1. Synced means the service that keeps the passkey copies it to your other devices.
  2. Rename changes the name you gave it.
  3. Remove stops it signing you in. The copy on your device stays until you delete it there.
  4. Add a passkey adds another, for a second device.

Costimate emails you each time a passkey is added or removed. If that was not you, reset your password.

After you sign in with a password, a small card may offer a passkey: Sign in faster next time with a passkey. It appears on a device that can make one, while you have none. Not now hides it for good. Ignored, it comes back after your next password sign-in.