Think about the last time you made someone create an account. Not a staff member: a member of your audience. Someone who wanted a ticket, or a course, or their donation receipt, and between them and that simple thing you placed a form asking them to invent a password.
They will forget it. Not because they are careless but because they are sane: this is an account they will use twice a year, for one organization, among the hundreds of logins modern life already demands. So six months later they hit “forgot password,” wait for the email, invent another one, and quietly resent you for the ritual.
Passwords are a cost you chose
For staff tools, accounts earn their keep. The people working in your software every day need identity, permissions and security that holds up, and they log in often enough that the password stays in muscle memory.
Your audience is different in every way that matters. They sign in rarely. They never see admin screens. They did not choose your software and owe it no patience. Each password you make them hold is friction you are spending, and the bill arrives as abandoned sign-ins, support email and receipts that never get downloaded.
The one-time code
There is a simpler contract: prove you own your email address, and you are in.
When someone signs in to your portal on Mercleo, they type their email and receive a short code. Typing it back is the whole ceremony. No password exists, so none can be forgotten, reused from a breached site or written on a note under the keyboard. The email inbox they already guard is the key, which is exactly the security model of every “forgot password” flow anyway, minus the password theatre in front of it.
For the person signing in, the experience is the same on every visit, whether it is their first or their fifteenth. For your organization, the sign-in stops being a wall and becomes what it should have been all along: a doorway with their name on it.
One door, not five
The deeper point is not the code; it is what the door opens onto. The platform gives every account a portal where a person finds everything they hold with you: tickets beside certificates beside receipts, under your brand and your domain. Signing in once, simply, is what makes that promise usable. A single front door with a heavy lock is just a different kind of fragmentation.
And because the person signing in resolves to the same contact record everything else writes to, the visit itself is part of the relationship history, not an anonymous session on a vendor’s domain.
Your members should spend their patience on your mission, not on your login screen.
Posts on this blog are general information, current as of their publish date. They are not updated as laws, regulations, or products change. Nothing here is legal, tax, accounting, financial, or other professional advice, and reading a post does not create an advisor relationship of any kind. Check requirements against official sources, and talk to a professional advisor about your organization's situation.
Descriptions of Mercleo products, features, or pricing reflect the product at the time of writing and are not a commitment. The current product pages are the reference. Links to third-party sites are provided for convenience, not endorsement; we don’t control what’s on them.