Authentication

Registration

Users register at /register with the following details:

After registration, you'll receive a verification email with a 6-digit code valid for 10 minutes.

Standard login at /login with email + password. Failed attempts are tracked and locked after 5 failures for security.

After login, if 2FA is enabled, you must enter a 6-digit code sent to your email. Codes expire after 5 minutes.

Open your account security settings

Start the 2FA setup process

Verify your email to complete setup

Store them securely for emergency access

When 2FA is enabled, 10 recovery codes are generated. Each can be used once to bypass 2FA. Store them in a safe place.

Choose Discord as your login method

Grant permission to access your Discord profile

Your account is created or linked

Choose Google as your login method

Choose which Google account to use

Your account is created or linked

OAuth accounts are linked to existing accounts if the email matches. Otherwise, a new account is created automatically.

The "Remember Me" checkbox extends the session to 30 days instead of the default 30-minute inactivity timeout.

You can view and revoke active sessions from Profile → Security. Each session shows:

Security tip: Revoke any sessions you don't recognize immediately. This will log out that device.