The membership ID is the one thing almost every member has on hand. It’s on the card in their wallet, on the renewal letter, on the welcome email. So when a member tries to renew or check their benefits online and gets asked for a username and password they never set up, the natural question is: why can’t they just type in their member number?
Short version: Altru’s online sign-in is built around web accounts, not membership numbers, and a membership ID on its own isn’t a safe way to log anyone in. But there are good ways to give members the “just use my card” experience they want. Here’s how to think about it.
How Altru’s online sign-in generally works
Altru’s web forms tie online access to a web user account that is linked to a constituent record. The member creates credentials (typically an email address and a password), and that account is what Altru recognizes when they come back. The membership itself hangs off the constituent record, not the login.
That has a few practical consequences:
- A member who joined at the front desk or by mail usually has no web account yet, even though they have an active membership and a card.
- If they create an account with an email that doesn’t match what’s on their constituent record, Altru may not connect it to their existing record, and you can end up with a duplicate constituent.
- Household members who share a membership may each need their own account, and only some of them will be linked the way you expect.
Whether your current Altru version offers any option to authenticate by membership number on web forms is worth confirming directly. We aren’t aware of a standard setting that does it, but configurations and releases change. Ask Blackbaud support, or test it on a non-production web form before promising anything to members.
Why a membership ID alone shouldn’t be a password
Even if you could turn it on, logging in with just the member number would be a weak design. Membership IDs are:
- Printed in plain sight on cards, mailing labels, and sometimes receipts.
- Often sequential, so anyone who knows one number can guess others.
- Shared across a household, which makes it hard to know who actually signed in.
Behind a login sits a member’s address, phone number, giving history, and sometimes saved payment information. A number that a stranger could read off a dropped card isn’t enough to protect that. The membership ID is a great identifier. It’s a poor secret.
What “sign in with my member number” usually needs to mean
When members ask for this, they rarely care about the mechanics. They want three things: not having to remember another password, not having to guess which email they used, and getting to their membership quickly. A pattern that delivers that without weakening security looks like this:
- Look up by membership ID plus one more fact. The member enters their number along with a last name or ZIP code. That finds the right record without giving anything away.
- Verify through a channel only they control. Send a one-time link or code to the email already on the constituent record. Clicking it proves they are who the record says they are.
- Show a masked hint if the email is stale. Something like “we’ll send a link to j****@gmail.com” helps people realize which address you have, and gives them a reason to call you if it’s wrong.
- Offer a staff fallback. If the email on file is dead, the member contacts your membership team, who updates the record after confirming identity. That’s a desk task, not a self-service one.
No password to forget, the card number does the work members expect it to, and the actual proof of identity is the inbox.
Things to clean up in Altru first
Any lookup-based sign-in is only as good as the data behind it. Before changing how members get online, spend some time on:
- Email coverage on active members. Run a membership query of current members with no primary email address. Those are the people who can’t use an email-verified sign-in at all, and the list tells you who to ask for an email at their next visit.
- Duplicate constituents. If one person exists twice, a lookup by membership ID may land on the record without the email, or the email may belong to the other record. Merge duplicates before you rely on either.
- Household and card holder data. Decide which household members should be able to sign in and make sure their records carry their own email, not just the primary member’s.
- Desk habits. Make capturing or confirming an email part of every in-person join and renewal. It’s the cheapest fix on this list.
Workarounds if you’re staying with native web forms
If you aren’t changing your online setup right now, you can still reduce the friction:
- Put clear “first time online? Create your account with the email you gave us” wording on the sign-in page, so members don’t make a second account with a different address.
- Include the email address on file in renewal notices, so members know which one to use.
- Give front desk and phone staff a short script for helping a member find or reset their web account, since that’s where the calls will go.
- Periodically query for recently created web-linked constituents with no membership, which can signal members who signed up under a new record instead of their own.
Where Social Good fits
Our Membership Portal gives members a self-service page where they can view their membership status, renew, upgrade, and update their profile online, working against live Altru data. If member sign-in is the sticking point for your organization, it’s worth asking us how the portal handles identifying members and whether that fits the approach above.
Quick answers
Can a member use their membership ID instead of a password in Altru?
Not that we’re aware of in standard Altru web forms, which rely on a web account. Confirm with Blackbaud support for your version before telling members either way.
Is a membership ID plus last name secure enough?
It’s fine for finding a record. For showing personal details or making changes, add a verification step such as a one-time link sent to the email on file.
What about members with no email on file?
They’ll need help from staff the first time. Capturing emails at the desk is the long-term fix.
