How do I make a role that can write but not publish?
Make your own team roles from the permissions that exist, for example a video editor who uploads media but can't publish. Owner-only powers never go in.
Site admin sign-in & team
Which roles should have to use two-step sign-in?
Pick the roles that must use two-step sign-in. We recommend at least Owner and Admin.
How do I require two-step sign-in for my team?
Choose which roles must use two-step sign-in, how many days they get to set it up, and see who has it on.
How do I invite someone to my team?
Send an invite link to a new team member, copy it once, and cancel it if you change your mind.
How do I add people to my team?
Invite writers and editors, give each person a role, limit them to sections, and turn accounts off when someone leaves.
How do I give roles from my provider's groups?
Map a group at your provider to a role here. The first match wins. Nobody becomes an owner this way.
How do I connect my sign-in provider?
Pick the provider, enter its address, client ID and secret, and register the redirect address in your provider's app.
Which email domains can use single sign-on?
Only people whose work email is in your allowed domains can sign in this way.
How do accounts get created with single sign-on?
Create accounts automatically on first sign-in, or require single sign-on for everyone except owners.
How do I let my team sign in with a company login?
Connect Google Workspace, Microsoft Entra ID, Okta or another OpenID Connect provider so your team signs in with their work account.
How do I set up two-step sign-in?
Add a free authenticator app on your phone so that you enter a 6-digit code after your password. It takes about 2 minutes.
How do I sign in with my company login?
If your owner connected a company login, use the Sign in with button. You come back to the admin once your company login finishes.
How do I sign in to my admin?
Sign in with your email and password. If two-step sign-in is on, you also enter a 6-digit code. Company login works if the owner set it up.
How do I choose a new password from a reset link?
Open the reset link from your email, type a new password twice and save. You are signed out on all devices and sign in with the new password.
How do I get back into my site as the owner?
Owners who cannot sign in can open a recovery link from their Keynate account on keynate.com and choose a new password for the site owner account.
How do I turn two-step sign-in on or off, move it to a new phone, or make new recovery codes?
Turn two-step sign-in on or off, move it to a new phone or make new recovery codes on My account. Turning it on needs your password and a code.
How do I sign out of all my other devices?
Use Sign out all other devices on My account if you lose a phone or used a shared computer. This device stays signed in.
How do I change my password, language or security?
My account shows your profile, admin language, password, two-step sign-in and signed-in devices in one place.
What do I do if I forgot my password?
Enter your email on the sign-in help page and we send a reset link. The link works once and expires in 30 minutes.
How do I create my owner account the first time?
Open the setup link from your Keynate dashboard, choose your name and password, and your admin is ready. The link works once.