---
title: Account Authentication
description: Set up email/password and OAuth (GitHub, GitLab, Bitbucket) authentication for your Capawesome Cloud account. Secure sign-in options for mobile developers.
---

# Authentication

Capawesome Cloud provides multiple authentication methods to securely access your account. You can choose between email/password authentication and OAuth providers, or use both methods simultaneously.

## Authentication Methods

Capawesome Cloud supports the following authentication methods:

- **Email/Password**: Traditional authentication using your email address and a password.
- **OAuth**: Single sign-on using your GitHub, GitLab, or Bitbucket account.

Both authentication methods can be configured and managed through the [account settings](https://console.cloud.capawesome.io/settings/account){:target="_blank"}.

## Setting Up Email/Password Authentication

To enable email/password authentication:

1. Go to the [account settings](https://console.cloud.capawesome.io/settings/account){:target="_blank"} in the Capawesome Cloud Console.
2. Scroll to the **Password** section.
3. Set a password for your account by entering your desired password and confirming it.
4. Click **Save** to enable email/password authentication.

Once configured, you can use your email address and password to sign in to Capawesome Cloud.

## Setting Up OAuth Authentication

To set up OAuth authentication:

1. Go to the [account settings](https://console.cloud.capawesome.io/settings/account){:target="_blank"} in the Capawesome Cloud Console.
2. Scroll to the **Identities** section.
3. Click on the **Connect** button next to your preferred provider (GitHub, GitLab, Bitbucket, or Microsoft).
4. Follow the authorization flow to connect your account.

Once linked, you can use the OAuth provider to sign in to Capawesome Cloud. You can add or remove OAuth providers at any time by visiting the account settings and clicking the **Disconnect** button next to the provider you want to remove.

## Two-Factor Authentication (MFA)

Two-factor authentication adds an extra layer of security to your account by requiring a second form of verification in addition to your password. Capawesome Cloud supports time-based one-time passwords (TOTP) using authenticator apps.

### Enabling MFA

To enable two-factor authentication:

1. Go to the [account settings](https://console.cloud.capawesome.io/settings/account){:target="_blank"} in the Capawesome Cloud Console.
2. Scroll to the **Two-factor authentication** section.
3. Follow the on-screen instructions to set up MFA:
   - Scan the QR code with your authenticator app (such as Google Authenticator or Authy).
   - Enter the verification code generated by your authenticator app.
4. Click **Enable** to activate MFA for your account.

Once enabled, you will be prompted to enter a verification code from your authenticator app each time you sign in.

## Recovery Codes

Recovery codes are backup codes that can be used to regain access to your account if you lose access to your authenticator device. It is highly recommended to generate and store these codes in a safe place when enabling MFA.

### Generating Recovery Codes

To generate recovery codes:

1. Go to the [account settings](https://console.cloud.capawesome.io/settings/account){:target="_blank"} in the Capawesome Cloud Console.
2. Scroll to the **Recovery codes** section.
3. Click on the **Generate** button.
4. Download or copy the generated recovery codes and store them securely.

Each recovery code can only be used once. If you run out of recovery codes or lose them, you can regenerate new codes at any time by following the same steps above.