Sign-in email

Your sign-in email is the address you use on Log in to Anchor. You can change it from Account → Profile. The change needs a click from both inboxes: the current address approves, then the new address confirms. Nothing changes until the second click.

This is per-user. An organisation's contact email is set on Settings → Organization, but the change can update it for you (see below).

Open your account menu (avatar) → Account. Stay on the Profile tab.
Under Email, click Change email.
Enter the New email address.
Prove it is you:
- Current password if you have one.
- Authentication code if two-factor authentication is on.
- If you sign in only with Google or Apple, you must have signed in within the last 10 minutes. If not, sign out, sign in again and come back.
If an organisation you own uses your current address as its contact email, you see Also use the new address as the contact email for …, ticked. Untick any you want to keep as they are.
Click Send approval email.

Profile now shows Email change to n•••@… pending with Cancel. Until the change is finished you still sign in with your current address.

Step 2: approve from your current inbox

Anchor emails your current address: Approve your new Anchor sign-in email. Open Approve change; the page shows From and To (masked) and asks again before anything happens.

Approve change: Anchor then emails the new address.
This wasn't me: cancels the request. You get Your Anchor email change was cancelled. If you did not ask for the change, someone may know your password: change it.

The new address gets no email until the current one approves.

Step 3: confirm from the new inbox

The new address gets Confirm your email address for Anchor. Open Confirm, check From and To, and click Confirm. Then:

You sign in with the new address and your existing password. Linked Google or Apple sign-in keeps working.
Every device is signed out, including this one. The sign-in page shows Sign-in email changed. Sign in with your new address.
Pending invitations sent to your old address move to the new one (unless that organisation already invited the new address).
The contact emails you left ticked change to the new address. Each change appears in that organisation's audit log.
The old address gets Your Anchor sign-in email was changed. The new address gets You now sign in to Anchor with this address.

Links and limits


Link lifetime	24 hours each (approve, then confirm)
Use	Each link works once
Requests	3 per day; a new request replaces the open one
Cancel	Profile → Cancel, or This wasn't me from the current inbox, any time before the confirm

If a page says This link is not valid any more, the link was used, cancelled or expired. Start again from Profile.

Messages you may see

Message	Meaning
That is already your sign-in email.	The new address is the one you use now (case does not matter).
That address is already used by another Anchor account.	One person, one account per address. Sign in to that account instead, or use another address.
Email addresses on that domain are not allowed here.	This Anchor site only allows certain domains.
The new address is now used by another Anchor account; nothing was changed.	Someone registered the address between your request and the confirm.

Lost access to your old inbox

If you cannot open your current inbox, contact [email protected]. Support checks your identity outside Anchor, for example an identity document and the business registration naming you, and decides. If they agree, a site admin starts the change from Admin → Users → Change sign-in email… and records what was checked. Anchor keeps that note in the platform audit log, not the documents. The new address still has to confirm before anything changes, and both addresses are told afterwards.

Agents (MCP)

Agents cannot request, approve or confirm an email change, and must never be given the links. The change stays human-only on the Profile tab and the two link pages.

Remote MCP: get_email_change_status returns pending, stage (awaiting_old or awaiting_new), newEmailMasked and expiresAt. Nothing else.
In-tab WebMCP: anchor_get_context includes the same object as user.emailChange.

Password: your password does not change with your email
Two-Factor Authentication: needed to start a change when it is on
Audit Log: contact-email changes appear per organisation

On this page