Log In
Learn about login methods, session management, and security features for your HostUp Cloud account.
Log In
HostUp Cloud supports multiple login methods. Choose the one that works best for you — all methods give you the same level of access.
Login Methods
| Method | Description | Speed |
|---|---|---|
| Social Login | Sign in with Google, GitHub, or GitLab | Instant |
| Email Magic Link | Passwordless — a login link is sent to your email | ~30 seconds |
| Passkey | Biometric or security key (Face ID, Touch ID, Windows Hello) | Instant |
| Email & Password | Traditional credential-based login | Instant |
Social Login (Google, GitHub, GitLab)
- Go to auth.hostupcloud.com/login.
- Click the provider button (Google, GitHub, or GitLab).
- Authorize access if prompted.
- You're signed in and redirected to the dashboard.
Email Magic Link
- Click Email on the login page.
- Enter your registered email address.
- Check your inbox for a magic link from HostUp Cloud.
- Click the link — you're signed in instantly.
Magic links are rate-limited to 3 requests per 60 seconds. If you don't receive the email, check your spam folder or try again after 60 seconds.
Passkey (Biometric / Security Key)
If you've registered a passkey in your security settings:
- Click Passkey on the login page.
- Your browser prompts you for biometric verification (Face ID, Touch ID, fingerprint) or a physical security key.
- Verify your identity — you're signed in.
Passkeys are the fastest and most secure login method. You can register passkeys from Settings > Security > Passkeys in your dashboard.
Email & Password
- Enter your email and password on the login page.
- Click Sign In.
Quick Login
HUC remembers your last used login method. When you return to the login page, you'll see a "Continue with [Method]" button for quick access — for example, "Continue with Google" or "Continue with Passkey".
Session Management
Session Duration
| Setting | Value |
|---|---|
| Session lifetime | 7 days |
| Session refresh | After 1 day of activity |
| Cookie cache | 5 minutes |
Your session stays active for 7 days. After that, you'll need to log in again.
Multiple Sessions
HUC supports multi-session — you can be logged in on multiple devices and browsers simultaneously. Each session is tracked independently with:
- IP address and location
- Browser and device information
- Login timestamp
Managing Active Sessions
Go to Settings > Account Actions in your dashboard to:
- View all active sessions — see device, browser, IP, and location for each
- Revoke a specific session — sign out from a single device
- Revoke all other sessions — sign out everywhere except your current device
- Revoke all sessions — sign out from all devices including the current one
If you see a session you don't recognize, revoke it immediately and change your password. Consider enabling additional security measures like passkeys or IP restrictions.
Security Features
CAPTCHA Protection
Login and signup forms are protected by Cloudflare Turnstile to prevent automated and bot-based login attempts.
IP & Country Restrictions
You can restrict where your account can be accessed from:
- IP Whitelist — only allow login from specific IP addresses or CIDR ranges
- IP Blacklist — block login from specific IPs
- Country Whitelist — only allow login from specific countries
- Country Blacklist — block login from specific countries
Configure these in Settings > Security > IP & Country Restrictions.
Be careful when setting IP or country restrictions. If you lock yourself out, contact support at hostupcloud.help to regain access.
Login Audit Trail
Every login attempt is logged with:
- Login method used (social, magic link, passkey, password)
- IP address and geolocation
- Browser and device details
- Success or failure status
- Timestamp
If a login attempt is blocked due to geo-restrictions, you'll receive a security alert email with details of the blocked attempt.
Rate Limiting
To protect your account:
| Action | Limit |
|---|---|
| General API requests | 100 per 60 seconds |
| Magic link requests | 3 per 60 seconds |
| Email OTP requests | 3 per 60 seconds |
Linked Accounts
You can link multiple authentication providers to your account. For example, sign up with email and later link your Google and GitHub accounts. View and manage linked accounts from Settings > Security > Social Accounts.
Troubleshooting
I didn't receive the magic link email
- Check your spam/junk folder.
- Make sure you're using the correct email address.
- Wait 60 seconds and try again.
- If the problem persists, try a different login method.
My passkey isn't working
- Make sure your browser supports WebAuthn.
- Try re-registering the passkey from Settings > Security > Passkeys.
- If using a security key, ensure it's properly connected.
I'm getting "Access Denied"
- Your IP or country may be restricted. Check Settings > Security or contact support.
- Your account may be temporarily suspended. Check your email for notifications.
Next Steps
- SSO Access — How single sign-on works across all HUC services
- KYC Verification — Verify your identity for full access