Why verify your user account?
Verification is the most secure way to protect your Merit user account. Unlike passwords, the passwords and confirmation codes underlying identity-based authentication cannot be easily leaked, guessed, or used on their own.
💡 We recommend verification to all (master) users who manage company payroll data. Passwords can leak and fall into the hands of criminals.
Before verifying, make sure that...
You have a valid Mobile-ID, Smart-ID, or ID card
The authentication method is your own personal property (not that of a colleague, board member, or client)
If you use an ID card, a card reader is connected to your computer, and the ID card software is installed
You accept that verification is permanent – it cannot be removed or undone later
⚠️ Please note! Before confirming, make sure you are entering your own personal identification code. If you accidentally verify the account with someone else's identification code, the account will be linked to that person going forward.
How to verify your user account
1. Log in to the program with your password
Go to https://palk.merit.ee/Authent/Login and log in with your e-mail address and password.
Login view – select Password, enter your e-mail address, and password.
2. Open Settings → My account from the menu
Click the gear icon in the program's main menu, then select My account.
3. Click the Verify account button
In the Account verification section, click the green Verify your user account button.
My user account view – the green Verify your user account button in the Account verification section.
4. Choose an authentication method and enter your details
In the window that opens, select Mobile-ID, Smart-ID, or ID card and enter the required details:
Mobile-ID – phone number and personal identification code
Smart-ID – personal identification code
ID card – insert the card into the card reader
Then click Start.
Authentication method selection window – Smart-ID shown in this example.
5. Confirm the verification code on your device
A 4-digit verification code appears on the screen. Make sure the same code is shown on your phone or in the Smart-ID app, and confirm it with your PIN.
The verification code is displayed while the program waits for a response from the mobile device.
6. Check that verification was successful
Once verification has been completed successfully, the linked personal identification code is shown in the My account view. The sections for changing your password and for two-factor authentication (2FA) disappear – you no longer need them.
Confirmation that the account has been verified successfully – the linked personal identification code is displayed.
How to log in after verification
Once your user account has been verified, you can log in to the program with any of the three authentication methods, regardless of which one you used for verification:
Mobile-ID
Smart-ID
ID card
Logging in with a password is no longer possible after verification. The Password option cannot be used in the login view. You also cannot recover your password.
💡 It does not matter whether you verified your account with, for example, Smart-ID – you can still log in with Mobile-ID or an ID card as well, because all three methods are linked to the same personal identification code.
Important to know
Verification is permanent
Verification cannot be removed or undone later. Before clicking the Verify account button, make sure you want to log in from now on only with an ID card, Mobile-ID, or Smart-ID.
Using the program on a mobile device
If you often use Merit Palk on a smartphone or tablet, we recommend verifying with Mobile-ID or Smart-ID. Using an ID card on a mobile device is impractical because it requires a card reader.
Frequently asked questions
Can I undo verification?
Can I undo verification?
No. Verification is permanent.
Before verifying your user account, please make sure you use your own personal identification code, not someone else's. Verification is linked to the user account, not to a specific company.
Are verification and two-factor authentication (2FA) the same thing?
Are verification and two-factor authentication (2FA) the same thing?
No. These are two different security solutions:
Two-factor authentication (2FA) – you keep your password and add a second layer of security on top of it (a code from an authenticator app).
Account verification – the password is abandoned entirely, and logging in is based solely on your personal identification code, using an authentication method (Mobile-ID, Smart-ID, or an ID card).
Can a verified account be handed over when an employee changes?
Can a verified account be handed over when an employee changes?
No. Like a bank account, a verified Merit account is linked to a specific person's personal identification code and cannot be transferred to a new employee. If, for example, a company's accountant changes, the new accountant must create a new user account, the companies must be transferred to the new accountant, and the old user account must be removed from the companies.
Can I still log in with a password after verification?
Can I still log in with a password after verification?
No, because that would defeat the purpose of account verification. Password login is disabled, so no one can access your account if your password leaks.
Can several people use the same account after the user account has been verified?
Can several people use the same account after the user account has been verified?
No. Once a user account has been verified, it is no longer possible for several people to use the same account in turn.
A verified user account is linked to a specific person's authentication, and logging in is only possible with an ID card, Smart-ID, or Mobile-ID. This means that, from then on, one user account is intended for a single person.
If a company currently uses a shared user account (for example, an account with a general e-mail address), we recommend creating separate user accounts for the manager, the accountant, and other users, and assigning them the necessary user rights.
If several users are in Merit Palk and one user verifies their account, does the password login disappear for all users?
If several users are in Merit Palk and one user verifies their account, does the password login disappear for all users?
No. Account verification affects only the specific user account that was verified.
If, for example, one user verifies their account with Smart-ID, Mobile-ID, or an ID card, password login disappears for that particular user account, and from then on, logging in is only possible with an authentication method.
Other users can continue to log in with their passwords until they verify their accounts.
Are any actions in Merit Palk restricted if a user account has not been verified?
Are any actions in Merit Palk restricted if a user account has not been verified?
At present, no actions in Merit Palk are restricted to unverified user accounts; the full functionality of Merit Palk is available without restrictions.