Login and security
How the login link, an optional password, and sample workspaces work.
The bookmark
Use https://missionfield.co/login/client. That page is for a real client workspace. Bookmark it.
A login link
This is the usual way in. Scott sends the first invite from your client record. The email contains a one-time link that lasts 24 hours. Open it once and you are signed in. A newer invite replaces an older unused one.
When you come back, bookmark this page and use Send me a login link. Enter the email already on your company record. The fresh link lasts 1 hour and is single use. The form does not create an account. If the email is not on a record, the page still says to check your email. It does not say whether a workspace exists.
A password
A password is optional. The same page has a quieter password sign-in, mainly for a reset or when email is unavailable. Scott sets or resets that password from Set up / reset password on your client record. The password is between 12 and 256 characters. If you need a reset, contact Scott. The public form does not reset it for you.
A session lasts about eight hours. Setting a new password signs out existing client sessions for that workspace.
Samples
Finished fictional examples live at https://missionfield.co/login/samples. You enter your name, email, and phone, pick a sample, and open a completed Brain Build. You can read it. You cannot edit it, upload to it, or download its stored files. Your contact details are saved as a demo lead. The first time you open a sample in a browser session, a short training popup explains how to read it. Closing it keeps it closed for that sample until you start a new browser session.
Reference samples cannot be invited and cannot be given a password.
Team sign-in
Team members sign in at /login/admin with email and a password of at least 10 characters. The first administrator is created with a setup token that lives in the deployment settings, not in the workspace. Clients never receive that token.
Scott can also open Preview client view on your record. That starts an eight-hour client session for that company only. It does not replace your own login.
Sessions and files
The session cookie is HttpOnly and SameSite Strict. It is cleared when you sign out, and it expires after about eight hours.
Uploaded files go to private storage. The app will not take a file over 4 MB. Demo sessions are blocked from those downloads.
Passwords are stored as salted hashes. Do not send a password, a login link, or a setup token to the help chat. The chat cannot reset them.
Samples versus your record
Five reference companies ship with the workspace: an HVAC shop, a church, a dental office, a chiropractic office, and a property team. Editing a sample is refused. Editing a real client record does not change what visitors see on those samples.