> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ndumed.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Sign in and sign out of NduMed

> How to sign in to your hospital's NduMed address, what happens after a wrong password or too many attempts, how long you stay signed in, and how to sign out.

You sign in to NduMed at your hospital's own address, for example `https://stmary.ndumed.co`. The plain `ndumed.co` address without your hospital's name does not open a sign-in page.

## Sign in

**1. Open your hospital's address**

You see the **Sign in** page.

**2. Enter your details**

Enter your **Username** and **Password** and select **Sign in**.

**3. Enter your verification code (if set up)**

If you use two-step verification, the **Two-step verification** page asks for the 6-digit code from your authenticator app. Enter it and select **Verify**. You have 5 minutes to do this.

After signing in you land on **Home**. NduMed may first send you to another screen:

* **Set your password**, if your password must be changed (for example, a new account).
* **Set up two-step verification**, if your role requires it and you have not set it up yet.

You cannot use the rest of NduMed until you finish these steps.

## If sign-in fails

For security, NduMed shows the same message for every failure, whether the username is unknown, the password is wrong, or the account is deactivated or locked:

> We could not sign you in. Check your username and password, and try again.

| What you see | What it means | What to do |
| - | - | - |
| "We could not sign you in…" | Wrong username or password, or your account is deactivated or locked | Check for typing errors and Caps Lock. Use **Forgot your password?** if needed. If it still fails, ask your administrator whether your account is active. |
| "Too many attempts. Wait a few minutes, then try again." | Too many failed attempts in a short time | Wait 15 minutes, then try again. |

> [!WARNING]
>
> After **10 wrong passwords in a row**, your account locks for **15 minutes**. It unlocks by itself after that time, or straight away when you reset your password with **Forgot your password?**. Administrators cannot unlock it manually.

## How long you stay signed in

NduMed keeps you signed in on that browser for up to **14 days** while you keep using it, and refreshes your session in the background. You are signed out sooner if:

* you select **Sign out**;
* you change or reset your password (this signs you out everywhere else);
* an administrator deactivates your account, changes your role or sends you a reset link.

When an administrator change ends your session, you see "You are signed out because your account changed".

> [!TIP]
>
> On a shared computer, always select **Sign out** in the top-right corner when you finish.

## Sign out

Select **Sign out** next to your name in the top bar. You see "You are signed out."


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.