Signing in and account security

To set up single sign-on for your organization, see Enterprise SSO.

Method	How it works
Email and password	Create an account with your work email and a password of at least 8 characters. You must verify your email before you can sign in.
Google	Select Continue with Google and choose your Google account.
Enterprise SSO	Enter your work email and select Continue. If your organization uses SSO, StackShip sends you to your identity provider.

If your email domain has no SSO connection, the password field appears after you select Continue. StackShip never tells you whether a domain uses SSO or whether an email address has an account.

If Google and SSO are temporarily unavailable, you can still sign in with email and password.

Create an account

Go to stackship.run/sign-in and select Create account.
Enter your work email and a password of at least 8 characters.
Open the verification email and select the link.
Return to the sign-in page and sign in.

If you don’t belong to an organization yet, create one or accept an invitation. See Members and invitations.

If your organization uses Enterprise SSO and has verified your email domain, signing in with Google using your work email adds you to that organization as a member.

Didn’t get the verification email?

Signing in before you verify shows Verify your email to sign in. and sends a new verification email. Check your spam folder, or select Resend the verification email on the verify email page. The page shows the same message whether or not the address has an account.

Reset your password

On the sign-in page, select Forgot password?, or go to stackship.run/forgot-password.
Enter your work email. If an account exists, StackShip emails you a reset link.
Open the link and enter a new password twice.

Reset links work once. If a link has expired or was already used, request a new one. Resetting your password signs you out of every other session and ends every tofu login. Connected agents lose access within an hour and must be authorized again.

If you sign in with Google or SSO and have no password, use the same flow to add one.

Manage your account

Open Account settings from the account menu at the foot of the sidebar, or press G Y.

Section	What you can do
Profile	Change your display name. Your email is read-only.
Password	Change your password. Optionally sign out every other session at the same time.
Sessions	See where you’re signed in, revoke a single session, or sign out all other sessions.
Connected accounts	See which sign-in methods are linked to your account.
Preferences	Turn single-key keyboard shortcuts on or off.

Sessions

Sessions lists each signed-in browser with its browser and operating system, IP address, sign-in time, and expiry. The current browser is labeled This browser. Revoke any session you don’t recognize, then change your password.

Approve access for tools and agents

Tools such as OpenTofu and AI agents connect with OAuth. The first time a tool connects, your browser opens a StackShip consent screen.

Sign in if you aren’t already.
If the tool needs an organization and you haven’t picked one, choose the organization it should work in.
Review the consent screen. It shows the client ID, where StackShip will send you back, the organization, and the permissions the tool requests.
Select Authorize to continue, or Deny access to cancel.

Tool	Access it gets	How long it lasts
AI agents (MCP)	One organization, limited to your own role	One hour. If the agent asks to stay connected, it can renew for up to 30 days.
OpenTofu (`tofu login`)	Every organization you belong to	90 days, with no renewal

A tool never gets more access than you have. If you leave an organization or your role changes, the tool’s access changes with it. To connect an agent to a different organization, authorize it again.

Only authorize tools you trust. If a consent screen appears when you didn’t start a connection, select Deny access.

Troubleshooting

Symptom	What to do
“The email or password was not accepted.”	Check for typos, or reset your password.
“Verify your email to sign in.”	Open the newest verification email StackShip sent you, then sign in again. Select Resend the verification email if it didn’t arrive.
“Sign-in did not complete.” after Google or SSO	Try again. If SSO keeps failing, contact your identity provider administrator.
Too many attempts	Wait a minute, then try again.
You signed in but see no organizations	Create an organization, or ask an owner or admin to invite you.