Signing in to the Tallify console
Your first Tallify sign-in from an invitation, the emailed code, passwords, the two-hour idle lock, roles, and what to do when you are locked out.
Your username is your email address. In a practice set up since October 2026 nobody is given a password: Tallify invites you, and you choose your own password at your first sign-in.
First sign-in
- Open the invitation email ("Your invitation to Tallify Console") and choose Set up your sign-in, or open your practice's console address and go to
/login/start. The invitation works for seven days; Tallify can send it again. - Type your email address. A six-digit code is emailed to you. Type it in within 30 minutes; you have five tries.
- Choose your password: at least ten characters with at least one letter and one digit. Common passwords, your username and the practice's name are refused.
In a practice that was set up before invitations, the administrator gives you a temporary password instead, in person or by phone. You sign in with it and are taken straight to the password screen; nothing else opens until you have chosen your own. Once you have, your temporary password is taken out of the file on the server where it was kept for you.
The emailed sign-in code
After the password, a six-digit code is emailed to you (on by default). It works for 30 minutes and allows five tries. If it does not arrive, send a new code (up to three times in ten minutes; a new code does not add tries). Leave Remember this device for 30 days ticked on your own computer or phone to skip the code there. A sign-in that emails a code can be started at most six times an hour and twenty times a day for one username.
Sessions and the idle lock
The console locks after two hours without activity and asks for your password again (the code only on a new device). A session ends after seven days in any case. Sign out, at the foot of the sidebar, ends the session on the server. Changing your password signs out every other session and forgets every other remembered device. The Users view lists your sessions and has a Sign out everywhere action, which also forgets your remembered devices.
Locked out
Five failed attempts within fifteen minutes from one address block that address for fifteen minutes. Twenty failed attempts on one username within fifteen minutes, from any address, block that username for fifteen minutes in any browser that has not signed in with it before, and an email tells its owner; a browser you have already signed in with keeps working. A wrong current password when you change your password counts as a failed attempt. Wait fifteen minutes and try again, or ask Tallify to reset your sign-in. Failures and blocks are recorded in the audit log.
Roles
| Role | Can | Cannot |
|---|---|---|
| Administrator | Everything, including users and the practice tables (advisers, products, prices). In a practice set up since October 2026, Tallify is the only administrator. | |
| Adviser | Their own clients: onboard, commit intake, build and sign advice, approve messages, upload documents, delete their own clients | Manage users or change the practice tables |
| Office staff | Work on the books of the advisers ticked for them: intake, tasks, documents, approvals | Sign advice for an adviser, manage users or change the practice tables |
| Read-only | View | Change anything |
A user with an adviser name sees and changes only that adviser's clients across every view, the approval queues, intake, the registers and file downloads.