Signing in to Redwood Connect for the first time

1. Install Microsoft Authenticator on your phone

It is free. If it is already on your phone (for example for Microsoft 365), you can use it as it is.

• iPhone: Microsoft Authenticator on the App Store
• Android: Microsoft Authenticator on Google Play

2. Open the link in your invite email

The email comes from Redwood Connect <no-reply@redwoodcollections.uk>. Open it on an office computer. The link works once, for 72 hours; if it has run out, ask an Owner to send a new one.

3. Choose a password

At least 12 characters. Three or four ordinary words together (for example a short phrase only you would think of) are easy to remember and hard to guess. Don’t use a password you use anywhere else, your name, or “Redwood”.

4. Scan the QR code

1. In Microsoft Authenticator, tap + (Add account), then Other account.
2. Point your phone’s camera at the QR code on the screen.
3. Type the 6-digit code Microsoft Authenticator shows for “Redwood Connect”. A new code appears every 30 seconds.

Can’t scan it? Choose “Can’t scan it?” on the screen and type the key into Microsoft Authenticator instead.

5. Save your recovery codes somewhere safe

You get 10 recovery codes. Each lets you sign in once without your phone. They are shown only once: print them, or keep them in a password manager. Not on your phone (you need them when your phone is lost). You can make new ones later under Settings → Sign-in & security.

Signing in after that

Your Redwood email address, your password, then the 6-digit code from Microsoft Authenticator. On the same browser the code is asked for once a day (once a week if you are allowed to use Redwood Connect outside the office).

If you lose or change your phone

• Sign in with one of your recovery codes (“Use a recovery code instead” on the code screen).
• Ask an Owner to reset Microsoft Authenticator for you. You get an email to set it up on your new phone (you need your password).
• Forgot your password? Use “Forgot password?” on the sign-in page (you still need Microsoft Authenticator or a recovery code).