Authentication

Signing in.

Glopzi uses a passwordless flow built around a 6-digit code we email you. No passwords to forget, no third-party SSO to configure.

The OTP flow

The full flow:

  • Visit dashboard.glopzi.com.
  • Enter your email address.
  • We email you a one-time 6-digit code. It arrives within seconds and is valid for 10 minutes.
  • Type the code on the dashboard. You’re signed in.

Your session lasts as long as your browser keeps the cookie (typically weeks), so you usually only sign in once per device.

Note

The cookie is scoped to .glopzi.com, which means signing into the dashboard also signs you into the editor at studio.glopzi.com without a second sign-in step.

Sign up vs sign in

The two flows live on separate routes to avoid confusion:

  • /signup: for new accounts. Asks for your email plus a name and accepts the terms of service. Issues a fresh account on success.
  • / (the dashboard root): for returning users. Email only.

Both routes lead to the OTP code step. Only the fields differ.

Why no passwords

Three reasons:

  • One fewer thing to forget. No password reset emails, no password manager edge cases.
  • Better baseline security. An OTP code is single-use and time-limited; a password is persistent and reusable. We avoid an entire category of breach.
  • Fewer rounds with the user. Email + code is two steps; email + password is also two steps but with the password being reused (and sometimes wrong). Code is faster on average.

Troubleshooting

  • The code didn’t arrive. Check your spam folder. Codes come from noreply@glopzi.com. If you still don’t see it within 5 minutes, request another. There’s no penalty for requesting multiple codes; only the most recent one works.
  • The code is rejected as expired. Codes expire after 10 minutes. Request a new one.
  • Logged in once, now redirected to sign in again.Your cookies may have been cleared, or you’re using a different browser. Sign in again.
  • Email is correct but no account exists. Use the /signup page instead. The sign-in page only works for accounts that already exist.
  • Lost access to the email entirely. Reach us via the contact page with ownership evidence (license key, domain you registered with, payment receipt). We have a manual recovery protocol.

Next steps