Users & Authentication

Account management, login methods, and security.

Login Methods

• Email + Password — Classic registration with email verification
• Google OAuth — One-click login with Google account
• GitHub OAuth — One-click login with GitHub account

Account Security

• Strong passwords enforced — Visual password strength indicator during signup
• Email verification — Required before accessing all features
• Two-Factor Authentication (2FA) — Optional TOTP via an authenticator app, plus eight single-use backup codes shown once during setup. Available for email + password accounts; Google and GitHub accounts are secured by that provider's own sign-in.
• Organisation security policies — In an organisation, an admin can require 2FA for all members or for selected roles, and set password rules, session timeout, a limit on concurrent sessions, an IP allowlist and lockout after repeated failed logins. The 2FA requirement applies to sign-ins with email and password; for members who arrive through the organisation's SSO, the identity provider enforces the second factor.
• **Enterprise Single Sign-On** — An organisation can connect its own identity provider over OIDC or SAML 2.0. Accounts are created on the first SSO login (just-in-time provisioning) and are restricted to the email domains the organisation has verified. SCIM 2.0 provisioning of users and groups is implemented but not yet exposed, so there is no automated joiner/leaver sync today — members are added and removed in Airbuild. SSO is set up together with our team — talk to sales.

Profile Settings

• Avatar upload — Upload a profile picture, JPG or PNG up to 2 MB (shown in team panel and project settings)
• Name — Username, first name and last name are separate fields
• Name and email — Edit your display name
• Language preference — Choose between English and German
• Notification channels — Configure Email, Slack, Discord, Telegram

Password Reset

Forgot your password? Click "Forgot password" on the login screen. You receive an email with a reset link (valid for 1 hour).

Account Deletion

You delete your account yourself under Settings > Profile. You confirm by re-typing your email address — no support ticket, no waiting period. You can also write to privacy@airbuild.ai.

Your projects, files, chats and published sites are deleted, active sessions are revoked and a running subscription is cancelled. The account record itself is anonymised rather than dropped: every identifying field is cleared and your email address is replaced with an undeliverable placeholder. What remains is the billing and usage history we are legally required to keep for seven years (§ 132 BAO, Austrian Federal Fiscal Code) — in anonymised form, no longer attributable to you. The full retention schedule is in our privacy policy.

Before you delete, Download ZIP on the same screen gives you your personal data — profile, projects, login history and activity — as JSON (GDPR Art. 15 and Art. 20). The export does not contain your source code; connect your own GitHub repository first if you want to keep it.