Sign in, passwords and security

Signing in

Choose Log in at the top of any page and sign in with your email address and password. If you have turned on an authenticator app or text message codes, you are then asked for a six-digit code. You land in your dashboard at carbontrader.nz/app.

There are two ways to sign in, and they lead to different accounts:

Email address and password - an account created at Create a free account.
Sign in with Carbon Tracker® - uses your Carbon Tracker login. It is a separate Carbon Trader account, never matched to an email-and-password account, even when the email address is the same. Its password and sign-in security are managed on Carbon Tracker.

Carbon Trader® only texts you a sign-in code if you have turned on text message codes. Nobody from Carbon Trader will ask you to read a code out.

Straight away. Registering signs you in as soon as you have confirmed your email address and chosen a password. There is no approval step to wait for. See Creating an account and confirming your identity.

If sign-in is paused

After 10 wrong passwords in a row, sign-in to that account pauses for 15 minutes and we email the account holder to say so. Wait, or choose a new password with Forgot your password?, which lifts the pause straight away. If the email tells you about attempts you did not make, change your password.

Authenticator app (optional)

An authenticator app is optional extra sign-in security. It is not required to use Carbon Trader.

To add one, open Account details in the dashboard and choose Turn on an authenticator app: add the setup key or scan the code with your app (such as Google Authenticator, Microsoft Authenticator or 1Password), then enter the six-digit code the app shows.
Once it is on, you are asked for a six-digit code from the app each time you sign in.
To turn it off, open Account details and enter your password and a current code from the app. Every other signed-in browser is then signed out.
We email you whenever an authenticator is turned on or off.
If you lose the device with the app on it, contact us from your registered email address.

Text message codes (optional)

Text message codes are the other optional sign-in check. They are not required to use Carbon Trader, and they need a New Zealand mobile number.

To turn them on, open Account details, choose Turn on text message codes, enter your password and your mobile number, then enter the six-digit code we text you. The number is saved only once you have entered that code.
Once they are on, we text a six-digit code each time you sign in. If you also have an authenticator app, you are asked for the app's code first and can choose Text me a code instead.
A code lasts 10 minutes.
To turn them off, open Account details, choose Turn off text message codes, and enter your password and a code we text to the phone on file.
We email you whenever text message codes are turned on or off.

Forgot your password

Use Forgot your password?, also linked from the sign-in page. We email a link to the address on the account. The link lasts 24 hours and works once; if you asked more than once, use the most recent email.

If no email arrives:

Check your junk folder.
Check you entered the email address the account was created with.
Contact us from that address.

An account that signs in with Carbon Tracker has no Carbon Trader password: reset it on Carbon Tracker.

Changing your password while signed in

Open Account details and use the Password section. You need your current password and a new one that meets the rule shown on the form. When the password changes, every other signed-in browser is signed out, any reset link still outstanding stops working, and we email you to say it has changed.

Changing your bank or ETS account details

These details decide where your money and units go, so changing them asks you to confirm it is you: enter your password (a code from your authenticator app also works). An account that signs in with Carbon Tracker needs to have signed in within the last 15 minutes instead; if it has not, sign out, sign in again and save. We email you whenever these details change. See Account, bank and ETS details.

Security emails we send

When your password changes.
When sign-in is paused after 10 wrong passwords.
When an authenticator app is turned on or off.
When text message codes are turned on or off.
When your bank account or ETS account details change.

If you did not make the change, contact us straight away.

Signing out

Use Sign out in the dashboard or at the top of the site. Signing out ends the session on that device.

Security tips

Do not share password reset links or codes.
Do not send screenshots that show reset codes or passwords.
Use a password manager.
Sign out when using a shared device.
Carbon Trader never asks for your RealMe login or your Emissions Trading Register password.
Contact us straight away if you think someone else has been in your account.