§.Account & security

Signing up and logging in

Email + password with hCaptcha, OAuth (Google), magic links, and invitation acceptance.

Updated 2026-04-13

Email + password

Standard form at /signup. hCaptcha runs on submission to slow bot signups. On success you get a confirmation email; click the link to verify and log in. A personal workspace is auto-created on first successful login.

OAuth (Google)

The Continue with Google button on the login and signup pages redirects to Google's OAuth consent screen and returns to PromptAssay when you approve. On first successful OAuth signin, an account and a personal workspace are created for you automatically. Your primary email is whatever Google returns as verified.

Invitation acceptance

If someone invites you to a team workspace before you have an account, the accept URL takes you through a signup + invitation-claim flow in one step: you create the account, the invitation is claimed in the same transaction, and you land in the team workspace already a member.

Email-match on invitations
If the invited email and your signup email don't match (case-insensitive), the claim fails with a typed error. Sign up with the email the invite was sent to, or ask the inviter to resend to your real email.