I can't sign in

Stash doesn't use passwords. You sign in with one of four methods:

Email verification code — we email you a 6-digit code to type into the sign-in screen
Magic link — we email you a link that signs you in when you click it
Passkey — biometric or device-based sign-in (Face ID, Touch ID, Windows Hello, hardware key, or password manager)
Continue with Google — single sign-on using your Google account

If you're stuck, work through these checks in order. Most issues resolve in the first three.

1. Are you using the right email?

Stash accounts are tied to specific email addresses. If you have multiple emails, you may be trying to sign in with the wrong one. Note that you can have several emails on a single Stash account — see Adding and managing email addresses.

Check: Look at the original Stash invite email — sign in with the email that received it.

Fix: If you originally signed in with Google, click Continue with Google on the sign-in screen and pick the correct Google account.

2. Are you on the right URL?

The Stash app lives at app.getstash.io. The marketing site (getstash.io without "app") doesn't have a sign-in form on the main page.

Check: Make sure you're at https://app.getstash.io.

3. Did the verification code or magic link not arrive?

Email delivery is the most common issue. The code or link is sent immediately, but mail providers occasionally delay or filter it.

Try this:

Wait 60 seconds — most emails arrive within a minute
Check your spam / junk folder
Search your inbox for emails from Stash
If nothing arrives, click Resend code (or Send again) on the sign-in screen
Confirm you typed the email correctly — a typo means the code went somewhere else

Codes expire after a short time. If the code arrived but doesn't work, request a new one and use it immediately.

4. Have you been invited yet?

If you've never received an invite email, you can't sign in. Stash isn't a self-serve sign-up — your team's Admin invites you first. See Inviting team members for what your Admin needs to do.

Check: Search your inbox (and spam folder) for an invite email from Stash. If nothing's there, ask your Admin to (re)send the invite.

5. Has your invite expired?

Invites expire 7 days after they're sent. If you try to use an expired link, sign-in will fail with an "invite expired" message.

Fix: Ask your Admin to resend the invite.

6. Did your Admin remove your account?

If you previously had access but suddenly can't sign in, your account may have been removed (intentionally or by accident). Only Admins can remove team members — see What Admins vs Members can do.

Fix: Ask your Admin to check the Team page and re-invite you if needed.

7. Passkey not working?

Passkeys depend on the device, browser, or password manager that holds them. If you're signing in from a new device or browser without your passkey synced, the passkey isn't available there.

Try this:

Sign in using email verification code, magic link, or Continue with Google instead
Once signed in, register a new passkey on this device — see Using passkeys with Stash
If you use a password manager (1Password, Dashlane, iCloud Keychain, etc.), make sure it's signed in and synced — your passkey may already be available, just not loaded yet

8. "Continue with Google" not working?

Make sure you're picking the right Google account in the popup — the one that matches your Stash invite email. If you have multiple Google accounts signed in, the wrong one may be selected by default.

If the Google popup is blocked, allow popups for app.getstash.io and try again.

9. Browser issues

If the sign-in flow gets stuck or loops:

Clear your browser's cookies for app.getstash.io
Try an incognito or private window
Disable browser extensions that might block authentication popups or magic-link redirects
Try a different browser

10. Mobile sign-in differences

On the Stash mobile app, you can sign in but you can't sign up or pay. Account creation and billing must happen on the web first. After your account exists, the mobile app works for everyone.

The same sign-in methods work on mobile: email verification code, magic link, passkey, or Continue with Google.

Concerned about an unrecognized device?

If you're worried that someone else may have signed in to your account, you can review every active session and sign any of them out remotely. See Managing active devices.