Each MorphGate install that signs in to your sync account is a device. You can see your devices, sign them out, and sign back in when a device was signed out.
Sign in on a new device
- Install MorphGate and open it. On Create your vault, choose Already use MorphGate sync? Sign in.
- Pick the same Sync server as your other devices: morphgate.com, or Your own server and its address.
- Enter your email and master password, and choose Sign in.
- If two-step verification is on, enter the code from your authenticator app.
Your vault downloads encrypted and is decrypted on the device. Team vaults follow. If a team uses single sign-on or device approval, its vaults wait until you've signed in at its identity provider or the device is approved. See Single sign-on and Device approval.
Forgot the master password? Choose Forgot the master password? Use your recovery key on the same screen. See Master password and recovery key.
On morphgate.com, your verified address gets an email when a new device signs in, with the device's name and platform. If it wasn't you, change your master password and sign that device out.
Your devices
The Sync panel lists every device signed in to your account under Devices, with its name, platform and when it was last seen. The one you're on is marked this device. Your account page shows the same list.
Sign a device out
In the Sync panel, choose Sign out next to a device, then Really sign out?.
- The device stops syncing at once. It gets no new changes, and can't send any.
- What is already on it stays there, encrypted with the master password. Signing out doesn't erase a device. If a device was stolen, also change your master password, and the passwords and keys it held.
- If your team uses device approval, signing a device out also forgets its approvals. It has to be approved again after it signs back in.
You sign devices out from the app, not from the account page.
When a device was signed out
A device can be signed out because you signed it out elsewhere, because the master password changed on another device, or because recovery was used. The sidebar then reads Sign in to sync, and the Sync panel asks for the Master password of the sync account.
- Enter the current password (and a code, if two-step verification is on) and choose Sign in again.
- If the password was changed on another device, use the new one. This device's vault then opens with the new password too.
- Until you sign in again, the device keeps working with what it has, and opens with its old password.
Disconnect this device
Disconnect this device in the Sync panel turns sync off here, without deleting the account. The personal vault stays on the device, and copies of team vaults are removed. See How sync works.
Tokens
A signed-in device holds a short-lived access token and a refresh token that changes every time it is used. The refresh token is stored encrypted in the vault, so it can only be used while the vault is unlocked. If an old refresh token is ever used a second time, the server signs that device out, in case it was copied.