Authentication

Every Norcube product sits behind one account at app.norcube.com. Authentication is email + password; there are no third-party sign-in providers today.

Sign up

app.norcube.com/signup — "Create your Norcube account":

• Name, Email, Password ("Must be at least 8 characters."), and agreement to the Terms and Privacy Policy.
• Create free account.

Signing up creates your account and a default organization, then drops you straight into the dashboard — no verification wall.

Email verification

After sign-up, a 6-digit code is emailed to you. Verification is a soft gate: you can use the products immediately, and the dashboard shows a banner until you confirm. The code expires after 15 minutes with a limited number of attempts; resending has a short cooldown (about a minute) — wait it out rather than hammering the button.

Log in

app.norcube.com/login — "Sign in to Norcube" — email + password. The dashboard manages session lifetime transparently (short-lived access tokens refreshed against a session that lasts 30 days from its last use — details in Tokens); you won't see expiry while actively using the app.

Change your email

Account → the Email address card. A two-step flow:

1. Enter your current password and the new email, then Send confirmation code.
2. A 6-digit code goes to the new address — "Check the inbox (and spam) of that address, then enter the code below within 15 minutes." Confirm it.

On success the account switches to the new address (which is thereby also verified); future log-ins use it.

Change your password

Account → Security → Change password: current password, new password (min 8 characters, must differ from the old one), confirm.

A password change signs you out everywhere else: other browsers and CLI sessions have to sign in again with the new password. You stay signed in where you made the change. Connected apps (such as MCP clients) stay connected. You get an email confirming the change.

Lost password

On the log-in page, Forgot your password? asks for your email address. If an account exists, Norcube emails a link to set a new password. The page answers the same either way, so it can't be used to find out who has an account.

• The link works once and expires after 30 minutes. Requesting a new one makes older links invalid.
• Setting a new password signs you out everywhere (every browser and CLI session) and disconnects every connected app, because a reset assumes someone else may have had access. Sign in again and reconnect the apps you use.
• You get an email confirming the change. If you didn't make it, reset again right away and contact privacy@norcube.com.

Multi-factor authentication is not available yet, so account security rests on password strength and control of your inbox.

Related

• Tokens — the JWT model behind sessions and API access.
• CLI — how nrc login authenticates through the browser.
• Account deletion.