A student or guardian signs into every institute that has added them with one Institflow account — one email, one username, one password, at `id.institflow.com`. Staff accounts are different: a teacher, secretary or owner signs in with a password kept at their own institute's address, not here.

## What it is, and what it isn't

Your Institflow account belongs to you, not to any one institute. It is not an account *at* an institute: it carries no grades, invoices or attendance of its own, and an institute can never see or change your password. What it does carry is your email, username, optional phone number, language, and the list of institutes that have added you as a student or a guardian.

Staff (teachers, secretaries, owners) never use this account. They sign in with a password kept at their own institute's own address — `https://<institute address>/login` — the same way they always have.

## Creating your account

Go to `id.institflow.com/sign-up`. First, pick who you are — **Institute owner**, **Student**, or **Guardian** — three cards that all create the exact same kind of account (there is no different account type underneath); the only thing this choice decides is what you see right after you verify your email: an institute owner lands on the customer portal ([Getting your institute](https://docs.institflow.com/en/guides/getting-your-institute)), a student or guardian lands on My institutes. Institute staff never pick any of these — their password lives at their own institute's address, not here.

Then fill in:

- **Email** — the address your institute invited (or will invite) — or, if you picked Institute owner, the address you'll use with the vendor.
- **Username** — lowercase letters, digits, underscores or dots, 3–30 characters, starting with a letter or digit. A few words (like `admin` or `institflow`) are reserved and can't be used.
- **Password** — at least 10 characters. Nothing else is required of it.
- **Phone** (optional) — international format, e.g. `+15551234567`.
- **Language** — Arabic, English or Hebrew. You can change it later.

You also agree to the [terms of use](https://institflow.com/terms) and [privacy policy](https://institflow.com/privacy) — the version you accept is recorded on your account.

> **Phone isn't a sign-in method yet**
>
> The phone number is optional and currently isn't used to sign in — only your email or username with your password does that. It's collected for later use.

After you submit the form, we mail a 6-digit code to your address. It's valid for 15 minutes, and you get 5 tries to enter it correctly before you need to request a new one. Once verified, you can sign in.

## Signing in to your institute

An institute has to invite you first — a student or guardian record there needs your email on file, added by someone on staff. You cannot request access yourself: an institute finds you, not the other way around.

Once invited, go to that institute's own login page (`https://<institute address>/login`) and press **Sign in with Institflow account**. You're sent to `id.institflow.com` to sign in (or you're already signed in), then back to the institute automatically.

If the account you're signed in with was never invited by that institute, you'll see a message saying it isn't a member there. There's nothing to fix on your end except the address: ask the institute to invite the *exact* email address your Institflow account uses. An invitation to a different address, even one you also own, won't match.

Your first successful sign-in at an institute activates the connection between your account and that institute. Nothing further to do after that — every later sign-in works the same way.

## My institutes

Right after you sign in, `id.institflow.com` sends you to the page that matches your account: if you own an institute, a chooser with **Institute portal** and **Open my institute**, plus the list below if you also belong to other institutes; if you belong to exactly one institute and own none, straight there — one less click; otherwise, My institutes, which lists every institute that has added you, split into two groups:

- **Active** — you've signed in there before.
- **Invited** — an institute has added you, but you haven't signed in there yet.

Each active institute has an **Open** button that takes you straight to that institute's login through your account. An invited one shows Open too once the institute's server is set up — your first sign-in there is what activates it. If an institute isn't reachable yet, the button is missing and a note says so.

## Managing your account

From account settings (`id.institflow.com/account/settings`):

- **Change password** — requires your current password. Every *other* session is signed out; the one you're using stays signed in.
- **Change email** — requires your current password. We mail a confirmation link (valid for 1 hour) to the *new* address; nothing changes until you open it. Once confirmed, you're signed out everywhere, including here, and need to sign in again with the new address. We also mail your *old* address a notice with a ready-to-use password-reset link, in case the change wasn't you.
- **Sessions** — every device you're currently signed in on, with the option to sign any one of them out individually.
- **Export your data** — download a JSON file of your account details and the institutes you belong to.
- **Delete your account** — permanent, and asks for your current password to confirm. It:

- signs out every session,
- removes every link to every institute,
- but institutes keep their own records — you lose the ability to sign in there until someone invites you again.

## Security notes

- After 5 wrong password attempts in a row, the account is locked for 15 minutes; each further attempt while it's already locked doubles the wait.
- Verification codes and reset/confirmation links all expire, and each can only be used once.
- One account per email address — you can't create a second one with an email already in use, and an institute can only ever invite the one account that verified that address.

Staff at an institute: see [Inviting students and guardians](https://docs.institflow.com/en/guides/inviting-students-and-guardians) for how this looks from your side.
