Every way into a workspace now proves the email address

Signing up from the website has always emailed you a link before an account existed. Being invited into a workspace did not - accepting an invitation set your password and let you straight in, on the strength of the link alone.

That is sound when we put the link in your inbox. It is not sound for a CRM we set up and hand over: that link gets pasted into an email, a chat, or read down a phone, and whoever opens it has proved they hold a URL, not that they can read the mailbox.

So accepting an invitation now takes you back out to your inbox. You set your name and password, we email a single-use link, and that link brings you back to carry on. It is one extra click, and it means the address on a workspace is always one somebody demonstrably reads - which matters most for the owner, because that address is where password resets, billing notices and every security alert will go for the life of the account.

The check is enforced in one place that every page passes through, rather than at each entry point, so there is no door it does not cover. Accounts created before this exist unchanged and are unaffected.

Setting up a workspace also got two small fixes: a confirm-password field, so a typo can no longer lock you out of the account you are in the middle of creating, and a show-password eye on both fields.