Signing in, MFA, email verification, and passwords

Also known as: login, sign in, log in, 2FA, two-factor, multi-factor, authenticator, verify email, forgot password, reset password, account locked.

Aigeon's authentication lives under /auth/*. This page explains what to expect and how to recover if you get stuck.

Signing in

1. Open app.aigeon.ai/auth/login.
2. Enter the email + password you used to register.
3. If MFA is enabled on your account, you'll be prompted for a 6-digit code.
4. You land on the console at the organization you last used; switch orgs from the top-left.

Forgot password / reset password

1. On the login page, click Forgot password?.
2. Enter your email. Aigeon sends a reset link that's valid for 1 hour.
3. Follow the link, choose a new password (min 10 chars, at least one number and one letter), and you're logged straight in.

If the reset email doesn't arrive, check spam; if still missing after 5 minutes, email support@aigeon.ai.

Email verification (after sign-up)

When you register, Aigeon sends a verification link to the address you provided. You can use the console immediately, but sending is blocked until the email is verified — this prevents impersonation during signup.

• Link expired? Click Resend verification email on the verify page (/auth/sign-up-verify).
• Never got the email? Double-check for typos in the address; if the address is right, email support.

MFA (multi-factor auth)

Enable MFA from Settings → Owner → Security → Enable MFA:

1. Scan the QR code with any TOTP authenticator (Google Authenticator, 1Password, Authy, Bitwarden).
2. Enter the 6-digit code to confirm.
3. Aigeon shows you 10 single-use recovery codes — download them and store offline. Each code works once if you lose your authenticator.

From the next login onward, the MFA code is required after password.

Lost your authenticator

1. Use a recovery code on the MFA screen.
2. Or, if recovery codes are also lost, email support@aigeon.ai from the address on file. We'll verify your identity and reset MFA within one business day.

Account locked

Too many failed login attempts lock the account for 15 minutes. Wait, or reset the password to force an unlock.

Signing out / sessions

Sessions last 30 days of inactivity. Settings → Owner → Active sessions lists every device; click Revoke on any row to kill that session immediately.