Signing up and signing in
Create an account, verify your email, and sign in securely to access your document library and advanced features.
You can share a document without an account, but readership data, the file library, and the owner-side sharing controls need one. Sign up with an email address and password, or use Google sign-in where it is available.
Creating an account
When you sign up, you provide your name, email address, and password (minimum 8 characters). EveryPage then sends a verification email to the address you provided. You must verify your email address by clicking the link in the email before you can sign in. Signup does not sign you in, and an unverified account is rejected at login with "Please verify your email address before logging in" — this is the single most common reason sign-in fails.
Your email address is case-insensitive—EveryPage normalizes it to lowercase, so [email protected] and [email protected] refer to the same account.
Verifying your email
After signup, check your email for a message from EveryPage. The verification link is valid for 24 hours. Click it to activate your account, then return to the login screen and sign in with your email and password.
If you did not receive the email, check your spam folder. There is no self-service resend, and signing up again with the same address is refused ("User already exists"), so contact support if the link has expired.
Session security
When you sign in, EveryPage creates a server-side session. The _session cookie holds only an opaque token — the session data itself lives on the server — and the token is rotated immediately after a successful login to prevent session-fixation attacks. All authenticated requests use this session, so you stay signed in across page reloads and different sections of the app.
Sessions last 24 hours. When one ends you are signed out and returned to the login page.
Signing in with Google
When Google sign-in is enabled, the login page offers "Sign in with Google" and the sign-up page "Sign up with Google". The code exchange happens server-side, so EveryPage never sees your Google password.
When you sign in with Google, EveryPage:
- Reads your email address and name from Google, and refuses to continue unless Google reports the address as verified
- Signs you into the account already linked to that Google identity, if there is one
- Otherwise links your Google identity to an existing EveryPage account with the same email (safe only because Google verified the address), or creates a new account if there is none
An account created through Google has no usable password. To sign in without Google later, use the forgot-password flow to set one. Signing in with Google skips email verification: Google's verification stands in for it, and the account is active immediately.
Google sign-in is available only when it is configured for the site. When it is not, the button is hidden and the Google endpoints return 404.
Recovering a forgotten password
If you forget your password, use the "Forgot your password?" link on the login page. Enter your email address, and EveryPage sends a password-reset link valid for 1 hour. Click it, enter a new password, and you will be returned to the login screen. The response is the same whether or not the address is registered, so it never reveals which emails have accounts.
Important: Resetting your password signs out all active sessions on every device. There is no exception for the current device.
Changing your password
You can change your password from the Change Password section of account settings at any time. It asks for your current password, and the new one must be at least 8 characters. After you update it, EveryPage signs out all your other sessions but keeps you signed in on the device where you made the change — the deliberate difference from a reset, which signs out everything.
Claiming anonymous uploads
If you uploaded a document anonymously and then signed up or signed in from the same browser session, EveryPage automatically claims that document into your new or existing account. That applies to signup, ordinary login, and Google sign-in alike. The file keeps its original expiry date—claiming does not extend or reset the timer.
Claiming counts against your plan's active-file limit. If you are already at the limit, the document is not claimed and you are told so; it stays where it is, so freeing a slot and signing in again completes the claim.
When a document is claimed, it appears in your library and you unlock readership tracking and the owner settings. For more details, see Sharing without an account.
Account security best practices
- Use a unique, strong password you have not used elsewhere.
- Do not share your password with anyone.
- Sign out on shared devices when you are done.
- If you suspect unauthorized access, change your password immediately.