Create your account

An SFTP.cloud account belongs to your organization, not to you personally. You are the first person in it, and you can invite colleagues later on the Team page.

SFTP.cloud is a service for businesses and organizations. Sign up with your work identity: your work email address, or your Google Workspace or Microsoft 365 account. Personal mailboxes and personal Google or Microsoft accounts are not what the service is sold for.

Sign up

1. Go to https://portal.sftp.cloud.
2. Choose New to SFTP.cloud? Create an account.
3. Fill in:
   • Organization name. Your company or team name. It appears on your invoices and in the Portal. You can change it later.
   • Work email. The address you will sign in with, and where every notification goes. Use your organization's address; disposable addresses are refused.
   • Password. At least 12 characters.
4. Confirm that you are creating the account for a business or organization and that you are authorized to do so. The confirmation is required, and what you agree to is recorded with the account.
5. Complete the verification challenge, if one is shown. It is there so that a script cannot use the form to send mail to strangers.
6. Choose Create account.

Nothing is created yet. The Portal sends a six digit code to the address and shows Enter your code on the same page.

Confirm your email

Open the email, read the code, and type it into the page you left open. Your account, your organization and your first sign in are created at that moment.

The code works for 15 minutes and only on that page. Five wrong attempts burn it. If it expires or burns, choose Send a new code on the page; a new code can be sent about once a minute, and only the newest code works. If you closed the page, open the sign up page again in the same browser tab and it returns to the code step.

The email is deliberately plain: it says when and from which network address the request was made, gives the code, and says that nothing has been created. It contains no link except one that stops any further sign up mail to that address, for the benefit of somebody whose address was typed by mistake. Following that link means the address cannot receive a sign up code for a year; contact support if that happens to you by accident.

If the email does not arrive

Check your spam folder first. If it is not there, your mail filter may be blocking @syncplify.com and @syncplify.me. Allow both, then ask the page for a new code. An address is sent at most three codes an hour and five a day, however many times it is entered.

Sign up with Google or Microsoft

If Continue with Google or Continue with Microsoft is offered on the sign up page, you can use it instead. That account has no password and no authenticator of its own: your provider handles both, and you are signed in as soon as they confirm you.

Use your work account: a Google Workspace or Cloud Identity account, or a Microsoft Entra ID (Microsoft 365) work or school account. A personal Google or Microsoft account may be refused by the provider itself, or held while we check it.

Two rules apply, and neither can be turned off:

• Accounts are never linked automatically. If an account already exists for that email address, the provider sign in is refused and you are told to sign in with your password first, then link the provider from Account settings. Automatic linking by email address is how accounts get taken over.
• The last way into your account can never be unlinked. If a provider is your only sign in method, unlinking it is refused.

What happens immediately after

The Portal takes you straight to authenticator setup, and will not let you go anywhere else until it is finished. See Secure your sign in.

After that, the welcome wizard starts and asks you to create your first site. See Create your first site.

If you forget your password

1. On the sign in page, choose Forgot your password?
2. Enter your email address.
3. Follow the link in the email and choose a new password of at least 12 characters.

The reset link is valid for one hour and works once. The page says the same thing whether or not an account exists for that address, so only the address owner learns anything.

Changing your password signs out every trusted device, so the next sign in on each of them asks for your six digit code again.

If you have also lost your authenticator

A password reset does not get you past the second factor. Use one of your recovery codes.

If those are gone too, Syncplify support can clear the lost factor for you, but only while an active support grant exists on your account, and only somebody who is signed in with the admin role can create one. Support can remove a credential and send a reset link to your own address; it can never set a credential and never sees one.

Two habits make this a non event: save your recovery codes when they are shown, and keep at least two people with the admin role, so one of them can always grant support access on behalf of the other. See Your team and their roles.