remFREE supports passwordless sign-in using a verification code sent to the user's email address.
This provides an alternative to remembering and entering a password for every login.
How passwordless login works
The user begins a passwordless sign-in using their remFREE account email address.
remFREE sends a temporary verification code to that address.
The user enters the code to complete authentication.
The code is intended to be short-lived and single-purpose.
Why email verification matters
The passwordless flow depends on control of the email account associated with the remFREE user.
For that reason, the security of the user's mailbox remains important.
Protect administrative email accounts with appropriate safeguards such as strong authentication and organizational security controls.
Passwordless does not mean anonymous
A passwordless login is still an authenticated user session.
The resulting remFREE session remains associated with the individual user account and its tenant memberships.
Security activity
remFREE can record authentication events such as:
- successful sign-ins
- failed sign-in attempts
- passwordless authentication
- logout activity
Useful event context can include information such as:
- user identity
- login method
- IP address
- browser or user-agent information
- timestamp
Why failed sign-ins matter
A failed sign-in is not automatically evidence of an attack.
People mistype passwords.
Old credentials may be stored somewhere.
However, repeated or unusual failures can be valuable security evidence.
That is why remFREE makes authentication activity visible rather than treating login failures as meaningless noise.
Account page
The Account page can provide information about recent sign-in activity and account security.
This gives each user a convenient place to review their own account state.
Password reset
Password-based accounts can use the supported password-reset workflow when required.
Passwords should never be shared between technicians.
Security philosophy
Authentication is only one layer of access control.
remFREE combines user authentication with tenant membership and authorization.
A successful login proves identity.
It does not automatically grant permission to every organization, device, or privileged action.