Account setup and sign in

Sessional Australia is built for AHPRA-registered locums and independent contractors: GPs, specialists, pharmacists, nurses, physiotherapists, psychologists, occupational therapists, dentists, and paramedics. Setting up takes a couple of minutes. On the sign-up page you enter:

• First name and last name: how you appear on invoices and in the directory
• Email address: this becomes your sign-in and where every booking, invoice, and reminder lands
• Password: at least 10 characters, with at least one letter and one number, and not a commonly guessed password

You can add your AHPRA number during sign-up or leave it for later on the Professional tab of your profile. When you register, Sessional automatically creates your locum profile, puts you on the Free plan, and generates a personal referral code you can share with colleagues.

After signing up you receive a verification email with a confirmation link. Clicking it activates your account and unlocks your dashboard. A few things worth knowing:

• The verification link is valid for 24 hours
• You cannot reach your dashboard until your email is verified
• If the email has not arrived, check your spam or junk folder first
• You can request a fresh verification email from the verification page

Some hospital and health-service mail systems quarantine or delay external email, so if you signed up with a work address and nothing appears, ask your IT team to allow mail from sessional.com.au, or sign up again with a personal address.

There are two ways to get back into your account, and you can use whichever suits the moment:

• Password: enter your email and password on the sign-in page.
• Magic link: enter your email and we send a one-time sign-in link. Click it and you are in, no password needed. Magic links expire after 15 minutes, so request one when you are ready to use it.

Forgotten your password? Use the "Forgot your password?" link on the sign-in page. We email a reset link that lets you set a new password. For security, sign-in, magic-link, and password-reset requests are rate limited, so if you try many times in a row you may be asked to wait before the next attempt.

Change your sign-in email from the Account tab of your profile. The change uses a verify-before-switch flow so you can never lock yourself out:

1. A confirmation link is sent to the new address
2. Your account keeps using the old email until the new one is confirmed
3. The confirmation link is valid for one hour
4. Once you click it, the switch takes effect and you sign in with the new email from then on

If the new address already belongs to another Sessional account, nothing changes and no mail is sent to that address. That is a deliberate privacy measure, not a glitch.

Change your password from the same Account tab. You must enter your current password before choosing a new one, which stops anyone using a session left open on a shared clinic computer from quietly taking over your login. The new password follows the same rules as sign-up: at least 10 characters with a letter and a number.

When the change succeeds, every other active sign-in is signed out and we email you a security alert. You stay signed in on the device you used to make the change; any other device has to sign in again with the new password.

Sessional takes several measures to protect your account behind the scenes:

• One-way password hashing: your password is never stored in readable form, so even Sessional cannot see it.
• HTTP-only session cookies: your sign-in cannot be read by scripts running in the page.
• Encrypted records: sensitive details such as your AHPRA number, ABN, and bank details are encrypted at rest.
• Session revocation: changing your password or email signs out every other device automatically.

You can request account deletion from the Account tab. Deletion is scheduled 30 days ahead rather than happening instantly, which gives you a grace window to change your mind. During those 30 days you can cancel the request from the same screen and your account carries on as normal. We email you a confirmation when you request it, and again you can reverse it at any point before the scheduled date.