Skip to main content

Authentication & Security

Overview​

Captain.AI supports multiple authentication methods and provides secure access management.

Authentication Methods​

Email and Password Authentication​

Standard login with an email address and password.

If you belong to multiple workspaces, the "Select a Workspace" screen appears after login (after entering your code if 2FA is enabled). See Workspaces for details.

Two-Factor Authentication (2FA)​

You can set up two-factor authentication based on TOTP (Time-based One-Time Password).

Enabling 2FA​

  1. Open the User Settings > Authentication & Security section
  2. Click "Enable Two-Factor Authentication"
  3. A QR code is displayed
  4. Scan the QR code with an authenticator app (Google Authenticator, Authy, etc.)
  5. Enter the 6-digit code shown in the authenticator app to verify
  6. Backup codes are displayed

Important: Be sure to store your backup codes in a safe place. They are the only recovery method if you lose access to your authenticator app.

Logging In with 2FA​

  1. Log in with your email address and password
  2. You are automatically taken to the authentication code entry screen
  3. Choose an authentication method:
    • Authenticator app: Enter the 6-digit code shown in your authenticator app
    • Backup code: Enter one of your saved backup codes
  4. Enter the code and click "Verify"

Note: Authentication codes expire after 5 minutes. If a code expires, start over from the login screen.

Disabling 2FA​

  1. Open the User Settings > Authentication & Security section
  2. Click "Disable Two-Factor Authentication"
  3. You are asked to enter your current authentication code or password for confirmation
  4. After confirmation, two-factor authentication is disabled

Tip: If you lose access to both your authenticator app and your backup codes, ask an administrator to disable 2FA for you (see User Management).

Backup Codes​

  • Displayed only once, when 2FA is enabled
  • Each code can be used only once
  • If you use up all your backup codes, you must set up 2FA again
  • To reissue backup codes, disable 2FA once and then enable it again

Personal Access Tokens (PAT)​

An authentication token for accessing the Captain.AI API from external applications and scripts.

PAT Use Cases​

  • API calls from external systems
  • Automated operations from CI/CD pipelines
  • Batch processing via scripts

Managing PATs​

  • Create and revoke tokens under User Settings > Access Tokens
  • Each token is bound to the workspace it was issued in (see External API Integration)

See User Settings and External API Integration for details.

Logging Out​

  1. Open the user menu in the header
  2. Click "Log Out"
  3. Your session ends and you are redirected to the login screen

Password Management​

When setting or changing your password, choose one that meets the security requirements.

  • Changing your password: Change it from the "Authentication & Security" section of User Settings
  • Forgot your password: Reset it via "Forgot your password?" on the login screen (see Getting Started for details)