CoolFocus 5 gives you several ways to sign in. They all lead to the same login and the same organizations. Pick whichever is most convenient, and switch between them anytime.
The one rule that matters: CoolFocus recognizes you by your email address. Whatever method you use, it must lead back to the email address your organization invited. That's why a Google account with a different email won't get you into your organization. See below for how to fix that.
This article covers staff sign-in at next.coolfocus.app. Donors and clients sign in to their portals differently. See Donor Portal Login and Client Portal Login.
Your sign-in options
Sign in with Google, Microsoft, or Apple
The sign-in page shows three buttons at the top, with the Google, Microsoft, and Apple logos.
Go to next.coolfocus.app.
Select the logo for your provider. Use Google for Gmail or Google Workspace, and Microsoft for Outlook, Office 365, or Microsoft 365.
Choose the account whose email address matches your CoolFocus email, and approve the request.
You're returned to CoolFocus and signed in.
You don't need to set anything up first. If the email address matches, CoolFocus links that provider to your login automatically the first time you use it.
Why use this? You don't need another password. If your organization uses Google Workspace or Microsoft 365, your IT team's protections, such as their own two-step verification and the ability to disable a departing employee's account, also apply to how you reach CoolFocus.
Email and password
Enter your email address, select Continue, then enter your password. Forgot it? Select Forgot password? and we'll email you a code to reset it.
Passkey
Select Use passkey and confirm with your fingerprint, face, or device PIN. You must add a passkey to your account first. See Passkeys.
One-time code by email or text
After entering your email, select Use another method to have a one-time code sent to your email address or, if you've added one, your phone. This is handy on a device where you don't want to type your password.
"I signed in with Google and got 'Organization Access Needed'"
This is the most common sign-in problem. It happens when the Google (or Microsoft or Apple) account you chose uses a different email from the one your organization invited. For example, your personal Gmail when you were invited at your work address.
Because the email didn't match, CoolFocus created a new, empty login instead of using yours, and that login doesn't belong to any organization yet.
To fix it:
Sign out of the new login from the account menu.
Sign in again with the email address your organization invited, using its password or a one-time email code.
Go to Manage account → Profile → Connected accounts and select Connect account. Choose Google and pick the Google account you want to use.
From now on, the Google button signs you in to your real login, even though the email addresses differ.
Not sure which email you were invited with? Ask your CoolFocus administrator, or search your inbox for the invitation email. For more help, see Access Challenges: "You Already Have an Account" and "Organization Access Needed".
Other common questions
I was invited but never set a password. Can I use Google?
Yes, as long as the invitation went to your Google email address. Open the invitation link, then choose Google instead of creating a password.
I use CoolFocus 3. Does Google sign-in work there?
No. These options are for CoolFocus 5 at next.coolfocus.app. CoolFocus 3 has its own separate sign-in. See Which version am I using?
My organization requires MFA. Does signing in with Google skip it?
No. If your organization requires multi-factor authentication, you need it set up on your CoolFocus login no matter how you sign in. See Multi-factor authentication (MFA).
Can I stop using Google and go back to a password?
Yes. Set a password under Manage account → Security, then disconnect Google under Profile → Connected accounts if you want to.
I'm signed in from the office but "Access Restricted" appears
This is unrelated to how you signed in. Your organization limits access to approved networks. See IP Address Access.
For administrators
Every sign-in method on this page is available to all organizations. Individual methods can't be turned off for one organization.
Invite staff at the email address they'll actually sign in with. If your team uses Google Workspace or Microsoft 365, invite their work address so the one-click buttons work straight away. See Invitations.
To add a second layer of protection for everyone, require MFA under Settings → Security → Multi-factor authentication.
Sign-ins, whichever method was used, appear in the Security Log.