The Cobre Portal combines multiple security layers to protect your account while keeping access fast and intuitive. Whether you choose traditional login or our industry-leading passwordless option, your credentials and sessions are managed with bank-grade security.Login Methods#
Cobre offers two secure ways to access your workspaces. Choose the method that best fits your workflow.Passwordless Login with Passkeys (Optional)#
Cobre is the first company in Colombia to offer passwordless login for enterprise platforms, setting a new standard in business security and user convenience.How it works: Log in using only your email and a registered Passkey (biometric or device credential). No password or OTP required at login.
Who can use it: All Portal users who have completed OTP enrollment can register a Passkey. This includes operators, approvers, and administrators.
Why it's secure: Passkeys use cryptographic authentication tied to your device, making them resistant to phishing and more secure than traditional passwords.
Passkey Login Steps#
1.
Navigate to the Login Page: Visit the Cobre Portal
2.
Enter Your Email: Input your registered email address
3.
Authenticate with Passkey: Use your device's biometric (fingerprint, Face ID) or security key
4.
Access Workspaces: View and select from your available workspaces
You must complete OTP enrollment before registering a Passkey; this ensures compliance with Cobre's MFA policy
OTP remains required for step-up authentication during sensitive actions (money approvals, settings changes)
If you delete your Passkey or switch devices, log in with traditional credentials and register a new Passkey
Traditional Login (Email + Password + OTP)#
The default login method remains fully available and unchanged for users who prefer it.Traditional Login Steps#
1.
Navigate to the Login Page: Visit the Cobre Portal
2.
Enter Credentials: Input your registered email and password
3.
MFA Verification: Enter the six-digit code from your authenticator app (e.g., Google Authenticator)
4.
Access Workspaces: View and select from your available workspaces
First-time users: You must configure MFA during initial login. Follow the steps in the Multi-Factor Authentication section below.
Switching Between Workspaces#
Once logged in, view all your available workspaces in the workspace selector. Each workspace may have different assigned roles and permissions (e.g., Viewer, Approver, Admin). Switch between workspaces without needing to log in again.
Multi-Factor Authentication (MFA)#
MFA adds an extra security layer by requiring a second form of verification beyond your password. It is mandatory for all users and must be configured during the first login.Supported MFA Methods#
Time-based One-Time Password (TOTP): Use authenticator apps like Google Authenticator or Authy
Passkeys: Optional passwordless authentication after OTP enrollment is complete
Need help setting up MFA?
Watch the video below for a full walkthrough of the MFA configuration process.
MFA Setup (First Login)#
1.
Log in with email and password
2.
Verify your email: Enter the one-time code sent to your email
3.
Configure your authenticator app:Scan the QR code or manually input the setup key into your authenticator app
Enter the 6-digit code generated by your app to confirm
4.
Confirmation: A success screen confirms your MFA setup is complete
Resetting MFA: If you lose access to your authenticator app, create a support ticket. Once approved, you'll reconfigure MFA during your next login.
Password Recovery#
Forgot your password? Reset it easily through the self-service flow on the login page.Password Reset Steps#
1.
Go to the Login Page: Navigate to the Cobre Portal
2.
Click "Olvidé contraseña": Find the link under the password field
3.
Enter Your Email: Input your account email and click Continue
4.
Confirm Via Email: Click "Confirmar" in the email you receive
5.
Set New Password: Enter your new password twice to confirm
One uppercase and one lowercase letter
At least one special character (!, @, #, etc.)
6.
Login: Use your new credentials to access your account
Note: Password reset links expire after 2 hours for security. If expired, start the process again from the login page.
Session Activity Management#
The Portal actively manages sessions to protect your account from unauthorized access during periods of inactivity.How It Works#
Inactivity Alert (5 minutes): After 5 minutes of inactivity, a modal appears with a 3-minute countdown timer. Choose to:Stay Logged In – Continue your session
Logout – End your session manually
Automatic Logout (8 minutes total): If you don't respond during the countdown, your session automatically ends
Re-login Required: Log back in to resume work
