Your account and sign-in security

Open your account menu and select Your account. The available controls depend on whether you have an invited Empeiro account or a directory-only Microsoft identity. An Empeiro password is separate from the Microsoft work-account password.

Review your sign-in

This sign-in identifies you, the method and device, and expiry. The displayed expiry describes the current session; visits can extend it according to the account policy. Check the organization before entering work information. Use the account menu's Sign out when finished on a shared computer. That ends your Empeiro sign-in, not your Microsoft 365 session.

Update your name

Under You, edit First name and Last name, then select Save name and check Saved your name. If your identity is directory-managed and this section is absent, ask your administrator to correct the directory source instead.

Change your Empeiro email

  1. Under You, enter the new Email and select Change email.
  2. When connected platform email is available, check the new mailbox for the six-digit code. Enter it in the form and select Confirm the code. The old address remains until confirmation succeeds.
  3. Without connected email, provide your current password when requested, or leave it empty and complete a passkey confirmation if you have one.
  4. Read the success message and check the saved address. An address already belonging to another account is refused.

This changes your Empeiro account address; it does not rename your Microsoft work account. Do not use an email change as a way to link another person's Microsoft identity.

Set or change your password

  1. Under Password, supply Current password when shown. If you have a passkey, leaving the current password empty can trigger a passkey confirmation instead.
  2. Enter New password (12+ characters) and The same new password. Common passwords are refused.
  3. Select Change password, or Set a password when none exists.
  4. Check the success message. A password change ends your other sign-ins; your current session remains so you can review your security.

For a forgotten password, use Forgot your password? on the sign-in page when email recovery is available, or ask an administrator for New password link. Recovery links are single use and expire; ask for a replacement if needed. Never share a password, recovery link or authentication code with another person.

Add a passkey

A passkey uses a device or password manager to verify you, usually with a PIN, fingerprint or face check.

  1. Under Passkeys, select Add a passkey.
  2. Enter Name this device, using a recognizable name.
  3. Select Add a passkey on this device.
  4. Complete any existing-passkey confirmation first, then the browser/device registration prompt. A recent confirmation can be reused for a short period.
  5. Check the new entry, its added time and device name. Test it in a separate browser session while keeping your existing recovery route.

If passkeys are unavailable, use a supported browser and device on HTTPS. Canceling the device prompt does not create a credential. The list shows This sign-in, last use and whether the device syncs the credential to its cloud.

Remove a passkey

Select Remove beside the named credential and confirm with a passkey when asked. Read the removal confirmation, then select Remove. It can no longer sign in here, but its saved copy stays in the device's credential manager until deleted there.

The server prevents deleting your last passkey when no other working sign-in route exists; the dialog explains what you need to set up first. Review other ways in and establish a usable recovery route rather than disabling that protection.

Sign out everywhere

  1. Select Sign out everywhere under This sign-in.
  2. Review the number of sign-ins and any Passkeys added since your oldest sign-in began. Remove an unrecognized credential before proceeding; merely ending sessions leaves passkeys valid.
  3. Select Sign out everywhere in the confirmation. This includes the current browser.
  4. Sign in again through a trusted route. If compromise is suspected, change the affected password and remove unknown passkeys as well.
  1. Your administrator must connect the real tenant and complete a successful authorized directory sync first. For the firm's rollout, directory import remains on hold pending security clearance.
  2. Stay signed in to your existing invited Empeiro account. Under Your Microsoft account, select Link your Microsoft account.
  3. Complete Microsoft authentication with your own identity from that organization's tenant, in the same browser that began linking.
  4. Return and check Linked. Use your work account will then open this same account and tickets; the existing password and passkeys remain usable.

If the redirect is refused or an identity is already linked, read the error and ask the administrator to resolve the app registration or account conflict. A matching email alone is not a safe substitute for completing linking. See Sign in with a work account.

← People and organization accounts