Account, sign-in & security
Your EHX account ties together chat, generate, checkout, and plan entitlements on ehxlabs.xyz.
Sign in and sign up
| Page | URL |
|---|---|
| Login | ehxlabs.xyz/account/login |
| Account home | ehxlabs.xyz/account |
Sign-in methods
- Google or GitHub — OAuth via Auth0; email is trusted for verification when provided by the provider.
- Email + password — Sign up requires a password (minimum 8 characters). Legacy accounts without a password may still use email-only login if enabled on the server.
After sign-in, product routes remember a return URL (e.g. /chat?returnTo=…) so you land back where you started.
Email verification
New password sign-ups receive a verification email. Until you confirm:
- Recovery and some paid flows may stay blocked.
- Open the link in the email, or go to Verify email and request a new message from the account area.
Resend: use Verify email on the account page when logged in.
Password reset
Forgot your password?
- Forgot password — enter your account email.
- Open the link in the reset email.
- Reset password — set a new password, then sign in again.
Reset links expire; request a new email if yours is old.
Sessions and security
On Account:
| Action | What it does |
|---|---|
| Log out | Ends the current browser session. |
| Sign out everywhere | Revokes all sessions for your account on every device; you must sign in again everywhere. |
| Change password | Updates password while logged in (current password required when you already have one). |
| Linked browsers | Read-only list of devices that have signed in (label, region). Unlink removes a device link, not the same as revoke-all. |
Tip: Use the same Google/GitHub account on each browser instead of link codes (deprecated when auth-required mode is on).
Account sections
| Section | URL | Purpose |
|---|---|---|
| Plan & usage | /account/plan | Tier, quotas, renewal |
| Invoices | /account/invoices | Invoice list (as billing matures) |
| Activity | /account/activity | Recent account events |
What requires sign-in
When auth-required mode is enabled on production:
- Chat, generate, and checkout redirect to login if you are not signed in.
- Free tier still requires an account; quotas attach to your account, not an anonymous browser id.
- Marketing (home, pricing, templates browse, KB, this docs site) stays public.
Privacy, cookies, and analytics
On first visit you choose Essential only or Accept analytics in the cookie banner. Essential cookies keep sign-in, quotas, and theme working. Optional analytics sends first-party visit events only after consent.
- Privacy notice
- Cookie policy
- Footer Cookie settings reopens the banner anytime
Checkout and paid entitlements bind to your account id, not a throwaway browser principal—so your plan follows you across devices after sign-in.