Login Methods and Session Basics
Overview
CloudAIPilot supports two login methods — email/password and OAuth (Google or GitHub) — and uses a dual-token session architecture to keep your account secure without interrupting your workflow.
Login methods
Email and password
Enter your registered email address and password on the login page. If you have two-factor authentication (2FA/TOTP) enabled, you will be prompted for your authenticator code after entering your password.
Google or GitHub (OAuth)
Click Continue with Google or Continue with GitHub on the login page. You will be redirected to the provider to confirm your identity, then returned to the dashboard. No password is required.
Session duration
CloudAIPilot uses a dual-token system:
- Access token — expires after 15 minutes. Automatically renewed in the background as long as you are active.
- Refresh token — valid for 7 days. Used to issue new access tokens without requiring you to log in again. After 7 days of inactivity, you must log in again.
In practice, you will not notice the 15-minute access token expiry during normal use. The browser renews it silently. You only need to log in again after 7 days of no activity.
Two-factor authentication (2FA)
You can enable TOTP-based two-factor authentication on your account to require a one-time code on every login.
- Go to Account → Security.
- Under Two-Factor Authentication, click Enable.
- Scan the QR code with an authenticator app (Google Authenticator, Authy, 1Password, etc.).
- Enter the 6-digit code to confirm setup.
Once enabled, every login with email and password will require the authenticator code. Store your recovery codes in a safe place — they are the only way to recover access if you lose your authenticator device.
Multiple devices and active sessions
You can be logged in on multiple devices at the same time. Each login creates a separate session record. To view and manage your active sessions, go to Account → Sessions.
If you suspect unauthorized access, go to Account → Security and click Revoke All Other Sessions. Your current session stays active; all other devices are logged out immediately.
Common issues
| Problem | Fix |
|---|---|
| Getting logged out unexpectedly | Your browser may be blocking the secure cookies CloudAIPilot uses for session management. Make sure cloudaipilot.com is not blocked by a privacy extension or strict browser setting. |
| OAuth login succeeds but dashboard does not load | Clear your browser cache and cookies for cloudaipilot.com, then try again. |
| Lost access to 2FA authenticator | Use one of your recovery codes (provided during 2FA setup) to log in, then disable and re-enable 2FA with a new device. |
| "Invalid credentials" on login | Check caps lock. If you signed up with Google or GitHub, use the OAuth button instead of email/password. |