Sign-in options and devices

You can sign in with an email and password, or with Google. Either way, the devices you are signed in on are yours to see and revoke.

Google sign-in

A one-tap Continue with Google sits on both the login and signup screens, on the platform's canonical domain.

• If Google vouches for the same verified email as an existing account, the two are linked automatically — you do not end up with a duplicate.
• Otherwise it creates a fresh account with no password at all.

An account with no password re-authenticates through Google when it needs to confirm something sensitive, in place of the password prompt others get. You can set a password later from Settings if you would rather have one.

Manage the connection under Settings → Connected accounts; the password lives in its own card beside it. Disconnecting Google takes a step-up confirmation.

A Google-only account is exempt from the two-factor mandate, and setting a password ends the exemption — see Two-factor authentication.

If your account came from a provider

An account created inside a reseller's portal signs in on that provider's domain, not on app.evoriqa.com. Try the platform login and it tells you where to go — "Your account is at your-provider-domain. Sign in there."

Password resets and verification links behave the same way: they work on the portal the account belongs to, and the email that carries them is branded for your provider. If you also have an Evoriqa workspace of your own, each host shows you only the workspaces that belong to it.

Staying signed in

Keep me signed in at login opts that device into a 90-day sliding session — rolled forward while the device stays in use — instead of the default 30-day absolute one. The choice survives the two-factor step, so ticking it still gets you a code prompt on that sign-in.

Active sessions

Settings → Active sessions lists every device you are signed in on: its browser and operating system, when it signed in, when it expires, and whether it is a remembered one.

From there you can sign out one device, or all other devices — the self-service kill switch for a laptop you no longer have. Sessions are also bound to the browser that created them, so a cookie replayed from a different browser is rejected.

Expired and revoked sessions are deleted by the daily retention job after a 7-day forensic grace.

Where to go next

• Two-factor authentication
• Delete your account