# Sign-in and your account

> See which email you sign in as, add more email addresses, link or unlink GitHub, GitLab, Azure DevOps and Bitbucket, and merge two MergeHarbor accounts you own.

Each person has one MergeHarbor account. It has a **primary email address**, optionally more verified addresses, and one or more **sign-in methods**: a password, GitHub, GitLab, Azure DevOps, Bitbucket, Google, or your organization's single sign-on. Every method and address opens the same account.

Open **Your account (account menu) → Sign-in and security** to see them. The top line says **You sign in as** your primary address.

## Why you might have two accounts

If you first signed in with GitHub, MergeHarbor used the primary email GitHub reported. Signing in later with a different address (for example a password sign-up with a personal email) creates a separate account unless that address is already on the first one. A password set on one account doesn't work for the other, so email and password sign-in says "Incorrect email or password".

To avoid this, add your other addresses to your account, or link your other sign-in methods to it. If you already have two accounts, merge them (below).

## Email addresses

- **Add an address**: enter it under **Email addresses** and choose **Send link**. Open the link in the browser where you're signed in to this account; it works once and expires after an hour. Both addresses get a notice when it's added.
- **Sign in with any of them**: email and password sign-in, "Forgot password", and GitHub, GitLab, Bitbucket, Azure DevOps and Google sign-in all find your account by any verified address. A provider only matches your account through an address that both the provider and MergeHarbor have verified; an unverified provider email never attaches to an existing account.
- **Make primary**: security notices go to the primary address. Switching keeps the old primary as an extra address.
- **Remove**: any address except the primary one. Make another address primary first if you want to remove it.

You can add up to 10 extra addresses. If the address you add already has its own MergeHarbor account, the email offers to merge that account into yours instead.

## Sign-in methods

- **Password**: the **Password** section names the address it signs in with. Accounts created with a provider can add one there.
- **Link a provider**: choose **Link GitHub**, **Link GitLab**, **Link Azure DevOps** or **Link Bitbucket** and approve it at the provider. If that provider account already signs in to another MergeHarbor account, you're offered to merge that account into this one.
- **Unlink**: available for every method except your last one. Set a password or link another provider first.
- **Single sign-on** identities appear here too; they're added when you sign in through your organization's identity provider.

## Merge another account into this one

Choose **Merge an account** under **Sign-in and security**, while signed in to the account you want to keep. You prove the other account is yours in one of three ways:

- its email and **password**,
- a **link** sent to its email address (open it in the same browser), or
- **linking** one of its sign-in providers from this account.

If the other account uses two-factor authentication, you also enter its code. Before anything changes you see exactly what moves:

- organization memberships (where both accounts are members, the higher role is kept),
- personal API keys, sign-in methods and code-host accounts,
- verified email addresses and notification preferences.

The other account is then turned off, and both addresses get a notice. Audit history stays as it was recorded. Merging again is harmless.

A merge is refused when:

- either account belongs to MergeHarbor staff or an instance administrator,
- the other account is a member of an organization that enforces single sign-on (ask an admin there to remove it first),
- the other account is managed by an organization's directory (SCIM),
- either account was set up from an invitation sent to an address it hasn't verified,
- the other account was already merged into a different account, or is turned off.

If you can't complete a merge yourself, contact support: they can merge accounts after confirming you own both addresses.