The Security tab is where you protect your Communitrak account. You can change your password, add a second step to your sign-in, register a passkey so you can sign in with your fingerprint or face, and look up your household PIN.
Everyone with a Communitrak account can manage their own security settings. No permission is required, and Community Leaders cannot change these settings for you.
Log in to Communitrak at https://app.communitrak.com.
In the main navigation menu, expand My Account and click Security.
You can also click your name or avatar in the top-right corner, choose My Account, and open the Security tab.
In the Account Password card, enter your Current Password.
Enter your New Password, then enter it again under Confirm New Password.
Click Update Password.
As you type, the Password must have: list checks off each requirement:
At least 8 characters
One uppercase letter
One lowercase letter
One number or special character
Passwords match
Passwords can't be longer than 72 characters. These are requirements, not suggestions: the button stays disabled until every item is checked.
Changing your password signs you out of Communitrak everywhere else, such as your phone or another computer. The device you're using stays signed in.
If you've forgotten your password, you can't change it here. See Resetting Your Password.
Two-factor authentication asks for a 6-digit code from your phone in addition to your password, so knowing your password alone is not enough to get into your account. A tag next to the heading tells you whether it is currently Enabled or Disabled.
Click Enable.
Open an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator, Authy, or 1Password, and scan the QR code. If the scan does not work, choose manual entry in your app and type in the code shown below the QR code.
Enter the 6-digit Authentication Code your app generates.
Click Verify & Enable.
Your 10 backup codes appear as soon as two-factor authentication is on. Save them before you close that window. See below.
Click Disable, enter your password, and click Disable 2FA. Your account will be protected by your password alone after that.
Backup codes get you into your account if you lose your phone or your authenticator app. Each code works once. The Backup Codes section appears under Two-Factor Authentication once it is turned on, and tells you how many codes you have left.
To replace them, click Generate New Codes, enter your password, and click Generate Codes. Any unused codes from before stop working the moment the new set is created.
A passkey lets you sign in with your fingerprint, your face, or your device's screen lock instead of typing a password. If your device saves passkeys to your Apple, Google, or password manager account, the passkey works on your other devices signed in to that account too. You can register more than one.
Click Register Passkey.
Follow your device's prompt to confirm with your fingerprint, face, or screen lock.
Give the passkey a name you will recognize later, such as "MacBook Pro" or "iPhone", and click Save. Click Skip to leave it unnamed.
Each registered passkey is listed with the date you added it and the date it was last used. To remove one, click the trash icon beside it and confirm with Delete Passkey. Removing a passkey only stops it from signing you in. You can register one again later.
With two-factor authentication: after your password, the Two-factor authentication screen asks for the code from your app. If you don't have your phone, click Use a backup code instead. and enter one of your backup codes.
Trust this browser? After a correct code, you can choose Trust to skip the code on that browser for 30 days. Choose Don't trust on shared or public computers.
With a passkey: on the sign-in page, click Sign in with a passkey instead of entering your email and password.
Resetting a forgotten password does not turn off two-factor authentication. It does forget every trusted browser, so your next sign-in asks for a code.
If you've lost your phone and your backup codes, you can recover your account yourself. It takes 72 hours, on purpose.
Sign in with your email and password as usual.
On the Two-factor authentication screen, click Can't use your authenticator or backup codes?
Click Email me a recovery link.
Open the email titled Confirm Your Two-Factor Recovery Request and click Confirm Recovery Request. The link works for 1 hour.
Once you confirm, a 72-hour waiting period starts. When it ends, two-factor authentication is removed, you're signed out everywhere, and you can sign in with your email and password. Turn two-factor authentication back on right away and save the new backup codes.
We email you right away, text your mobile number if it's verified, and send a notification to every device where you're signed in. Each notice has a way to cancel.
If you didn't start the recovery, click Cancel Recovery in the email, tap the link in the text, or click Cancel recovery on the Security tab. Then change your password and your email password.
If you find your authenticator app or a backup code, sign in with it. That cancels the recovery automatically. Signing in with a passkey does too.
Starting recovery again doesn't restart the clock. You'll see when the current one finishes.
The Household PIN card shows the unique PIN for your household. Communities use it for things like amenity access, authentication, and member verification. The PIN belongs to the household rather than to you, so everyone in your household sees the same one here.
This card is for looking the PIN up. Anyone with the View & Update Household Information permission can generate a new one from your household's page, which immediately stops the old PIN from working.
Your password, two-factor authentication, and passkeys belong to your Communitrak account, not to a single community. If you belong to more than one community, changing them once covers all of them.
Disabling two-factor authentication and generating new backup codes both ask for your password, even though you are already signed in. This is deliberate, so someone who finds an unattended screen cannot weaken your account.
A passkey is a second way in. If you register one on a phone or computer you keep with you, losing your authenticator app won't lock you out.
Verification and security emails always send. There is no notification setting that turns them off, because without them you could not get back into your account.
If you have questions or need help, chat with Communitrak Support from any page using the messenger icon in the bottom-right corner.
