Account & Sign-in

Registration (email)

1. Visit /register.
2. Provide first/last name, email, username (≥3 characters), and password (≥8 characters).
3. Submit and check email for verification link (/verify-email flow).
4. Until verified, login returns an unverified error.

Sign in

• Email + password at /login.
• Google OAuth — redirects through Google and back to Decimake; existing accounts link by email.
• SAML SSO (Business+ teams) — your admin configures IdP; users sign in via /sso/login?domain=yourcompany.com.

Two-factor authentication (2FA)

From Account Settings (/me):

1. Enable 2FA with an authenticator app (TOTP QR code).
2. Future logins may require a second code after password.
3. You can disable 2FA from the same screen when signed in.

Password reset

1. Forgot password at /forgot-password.
2. Email contains a one-hour reset link → /reset-password.

Profile & sessions

At /me you can update:

• Display name and avatar
• Password (email accounts)
• Active sessions — revoke individual devices or sign out everywhere except current session
• Personal preferences stored in user settings

Account menu (global header)

When signed in, the header menu offers:

• Account Settings → /me
• Switch Team → /teams
• Log Out