> For the complete documentation index, see [llms.txt](https://docs.ipaware.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ipaware.io/getting-started/quickstart.md).

# Authentication

Learn how to access your IPAware Console account using multiple authentication methods.

### Creating an Account

#### Standard Registration

**Steps:**

1. **Start Registration**
   * Click **Start Free Trial** on the [login page](https://console.ipaware.io/)
   * Enter your email address
   * Complete the Cloudflare Turnstile verification
   * Click **Send verification code**
2. **Verify Email**
   * Check your email for a 6-digit verification code
   * Enter the code in the console
   * Click **Verify**
   * If you don't receive the code, click **Resend** (available after 60 seconds)
3. **Set Password**
   * Create a strong password (minimum 8 characters)
   * Confirm your password
   * Click **Create account**
4. **Welcome!**
   * Your account is created
   * You'll be redirected to the dashboard
   * A new organization is automatically created for you

#### Invitation-Based Registration

If you've been invited to join an existing organization: 

**Steps:**

1. **Click Invitation Link**
   * Open the email invitation
   * Click the invitation link
   * You'll be taken to the registration page with your email pre-filled
2. **Set Password**
   * Create a password for your account
   * Confirm the password
   * Click **Create account**
3. **Join Organization**
   * You'll automatically join the organization
   * Your role will be assigned based on the invitation

> **Note:** Invitation links expire after a certain period. Contact the organization owner if your link has expired.

***

### Sign In Methods

IPAware supports three different ways to sign in to your account:

#### 1. Email & Password

The traditional authentication method. 

**Steps:**

1. Navigate to the [login page](https://console.ipaware.com)
2. Enter your email address
3. Enter your password
4. Complete the Cloudflare Turnstile verification
5. Click **Sign In**

> **Note:** If you have 2FA enabled, you'll be prompted to enter your authenticator code after signing in.

#### 2. Magic Link (Passwordless)

Sign in without remembering a password - we'll email you a secure link. 

**Steps:**

1. On the login page, click **Use Magic Link instead**
2. Enter your email address
3. Complete the Cloudflare Turnstile verification
4. Click **Send Magic Link**
5. Check your email inbox
6. Click the link in the email to sign in automatically

> **Security:** Magic links expire after a short period and can only be used once.

#### 3. Passkey (WebAuthn)

Use biometric authentication or hardware security keys for the most secure login experience. 

**Steps:**

1. On the login page, click **Sign in with a Passkey**
2. Your browser will prompt you to select a passkey
3. Authenticate using your device (fingerprint, Face ID, security key, etc.)
4. You'll be signed in automatically

> **Requirements:** Passkeys must be registered first from the Settings page after signing in with another method.

***

### Password Reset

Forgot your password? Reset it easily: 

**Steps:**

1. **Request Reset**
   * Click **Forgot?** next to the password field on the login page
   * Enter your email address
   * Complete the Cloudflare Turnstile verification
   * Click **Send Reset Link**
2. **Check Email**
   * Look for an email with the subject "Password Reset Request"
   * Click the reset link in the email
3. **Set New Password**
   * Enter your new password (minimum 8 characters)
   * Confirm the new password
   * Click **Update Password**
4. **Sign In**
   * You'll be redirected to the login page
   * Sign in with your new password

> **Security:** Reset links expire after 1 hour for security purposes.

***

### Email Verification

#### Verifying a New Email Address

When you change your email address in Settings:

1. **Verification Email Sent**
   * A verification link is sent to your new email address
   * A notification is sent to your old email address
2. **Click Verification Link**
   * Open the email sent to your new address
   * Click the verification link
3. **Email Updated**
   * Your email is now updated
   * You'll be signed out and need to sign in with the new email

#### Reverting an Email Change

If you didn't request the email change or made a mistake during it:

1. **Open Revert Email**
   * Check the notification sent to your old email
   * Click **Revert this change**
2. **Email Restored**
   * Your email is restored to the original address
   * The unauthorized change is cancelled

***

### Two-Factor Authentication (2FA)

If 2FA is enabled on your account, you'll need to provide an additional code after entering your password. 

**During Login:**

1. Enter your email and password
2. Click **Sign In**
3. You'll be prompted for a 2FA code
4. Open your authenticator app (Google Authenticator, Authy, etc.)
5. Enter the 6-digit code
6. Click **Verify** **Using Recovery Code:** If you don't have access to your authenticator app:
7. On the 2FA screen, click **Use Recovery Code**
8. Enter one of your recovery codes
9. Click **Verify**

> **Important:** Each recovery code can only be used once. Store them securely!

***

### Security Best Practices

#### Password Guidelines

* Use at least 12 characters
* Include uppercase and lowercase letters
* Include numbers and special characters
* Don't reuse passwords from other services
* Use a password manager

#### Account Security

* Enable 2FA for additional security
* Register a passkey for passwordless authentication
* Review active sessions regularly
* Use magic links on trusted devices only
* Never share your password or recovery codes

#### Session Management

* Sign out when using shared computers
* Review and revoke unknown sessions from Settings
* Each session shows device, location, and last activity

***

### Troubleshooting

#### Can't Sign In

**Check these common issues:**

* **Incorrect password:** Use the password reset feature
* **Email not verified:** Check your inbox for verification email
* **Account suspended:** Contact support at <hello@ipaware.io>
* **2FA code not working:** Ensure your device time is synchronized

#### Not Receiving Emails

**Try these solutions:**

* Check your spam/junk folder
* Verify the email address is correct
* Wait a few minutes - emails can be delayed
* Try resending the email
* Contact support if issues persist

#### Passkey Not Working

**Common fixes:**

* Ensure your browser supports WebAuthn
* Check that your device/security key is properly connected
* Try a different passkey if you have multiple registered
* Clear browser cache and try again

***

### Next Steps

After signing in:

* Set up your first API key
* Invite team members
* Configure security settings
* Review your usage