User account settings

Your Root & Branch Cloud account gives you access to the dashboard and the platform API. This page covers managing your profile, credentials, and authentication.

Creating an account

Register at the Root & Branch Cloud dashboard. You will need:

• An email address.
• A username.
• A password.

After registering, you receive a 6-digit verification code by email. Enter the code in the dashboard to activate your account. The code expires after 15 minutes.

Signing in

Sign in with your verified email address and password. The platform creates a secure, HTTP-only session cookie to keep you authenticated across requests. You can also authenticate API calls with a Bearer token obtained from the /api/auth/login endpoint.

Email verification

Every new account must be verified before it can create projects or resources. If your verification code expires, you can request a new one from the dashboard. There is a 30-second cooldown between resends to protect against abuse.

A verification attempt counter limits guessing. After 5 failed attempts you must request a new code.

Changing your email

You can change the email address associated with your account from the Account Settings page in the dashboard.

The email change flow uses two-step verification:

1. Request - enter your current password and the new email address. A verification code is sent to the new email.
2. Confirm - enter the code to complete the change.

The code expires after 15 minutes and has a 30-second resend cooldown. The new email must not already be associated with another account.

Changing your password

To change your password while signed in:

1. Go to Account Settings in the dashboard.
2. Enter your current password and the new password.
3. The new password must be different from your current password.

Changing your password signs you out of all other sessions for security.

Resetting a forgotten password

If you forget your password:

1. Click Forgot password on the sign-in page.
2. Enter your email address.
3. Check your inbox for a reset link. The link expires after 30 minutes.

For security, the platform always shows the same message regardless of whether an account exists for the email you entered. All active sessions are revoked when the reset is completed.

Deleting your account

You can permanently delete your account from the Account Settings page. This action requires:

• Your current password for verification.
• Typing your username to confirm.

Account deletion removes all your personal data, workspaces you own, and all associated Kubernetes resources. This action cannot be undone.