Find the message you see below, then follow the steps under it. Each message is quoted exactly as Tomba shows it. If yours isn't here, email [email protected].

"Invalid email or password." means Tomba couldn't sign you in with the email and password you typed.

Tomba asks you to pass a quick security check before you sign in or sign up. The check confirms that you're a person. If the check doesn't work, you may see:

To fix it:

"Popup blocked" and "Please allow popups to continue with Google." mean your browser blocked the sign-in window. The message names LinkedIn or GitHub if you used those. Allow pop-ups for app.tomba.io in your browser, then click the button again.

"Authentication cancelled" and "You closed the Google authentication window" mean the window closed before you finished. Click the button again, and finish the steps in the window that opens.

"Too many failed login attempts. Please try again later." means sign-in is locked for a short time after several wrong passwords. Wait, then try again. See I've been locked out of my account. What do I do?

"The given email already exists." means you already have a Tomba account with this address. Sign in on the sign-in page instead. If you don't remember your password, click Forgot password? after Continue with Work Email.

New accounts need a work email address at your company's domain. With a personal address, such as Gmail, the sign-up page shows a box titled "Sign up with this address in the Tomba app", and the button changes to Change email to Continue.

A temporary, throwaway address shows "Disposable email addresses are not allowed." or "This domain name is a disposable email".

Sign up with your work address. See Can I sign up with Gmail or another personal email?

These messages mean Tomba can't create an account for you right now:

Wait, and try again later, for example the next day. If you still can't sign up, email [email protected].

The firewall message reads "Your account has been blocked by the firewall. If you think this is an error, please contact us." Despite its wording, the message is about the network you connect from, not about your Tomba account.

Try another network, such as your phone's mobile data, or turn off your VPN. If it keeps happening, email [email protected] with the message and the time you saw it.

The VPN message reads "The IP address is believed to be acting as a Virtual Private Network server. If you think this is an error, please contact us." You may see it when you try Tomba without an account.

Turn off your VPN or proxy, reload the page and try again. If you don't use one, email [email protected].

On the sign-up page, a "Warning" can say "Suspicious property detected:", followed by a name, then "Please disable automation tools to continue."

Turn off any tool or extension that controls your browser for you. Then close the browser, open it again and go back to the sign-up page. You can also use another browser.

"This account has not been confirmed, please check your email for the confirmation link." means you haven't confirmed your email address yet. Open the email Tomba sent when you signed up, and confirm your address.

If the email didn't arrive, see I didn't get my account confirmation email.

"This account has no password set. Please set a password to continue." means you signed up with Google, LinkedIn or GitHub and haven't finished your registration. Open app.tomba.io, then add your name and choose a password on the Finish registration page. See Finish your registration and set a password.

"This account is under review. Our team will review it shortly." means our team is checking your account before you can use it. In the app, you see a screen that says Your account is under review.

You get access automatically once your account is approved. Click Check again to see if the review has finished. See Why is my account marked as suspicious?

"Your workspace requires SSO login. Please use your SSO provider." means your workspace asks you to sign in with your company's login, called single sign-on (SSO).

On the sign-in page, click Sign in with SSO, enter your Work email and click Continue. Then click Continue with SSO. See SAML Single Sign-On.

A screen that says Your account has been deleted means the account no longer exists, and Tomba signs you out. If you sign up again with the same address, the message is "Your account has been deleted. If you think this is an error, please contact us." To keep using Tomba, email [email protected].

A screen that says Your account has been blocked means an administrator stopped the account. See Why has my account been blocked?

"Sorry, but we couldn't log you in." and "Sorry, but we couldn't create your account." mean the sign-in or sign-up didn't go through. Reload the page, wait a few seconds and try again. If it happens again, try another browser, or email [email protected].

If none of this helps, email [email protected] with:

⚠️ Important: Never send your password.