Skip to main content

Authentication

Ghostpsy supports two authentication methods for the dashboard.

Email and password​

Register with an email and password. A verification email is sent to confirm ownership. After verification, log in with your credentials.

Password requirements:

  • Minimum 8 characters
  • At least one uppercase letter
  • At least one digit

Google OAuth​

Click "Continue with Google" to sign in with your Google account. No password needed. The first login creates your account automatically.

Sessions​

  • JWT tokens are used for API authentication
  • Tokens expire after 7 days
  • Logging out invalidates the session

Rate limiting​

Login attempts are rate-limited per IP address to prevent brute-force attacks:

  • 10 attempts per minute
  • 60 attempts per hour

Exceeding these limits returns a 429 (Too Many Requests) response.

Organizations​

Each user belongs to one or more organizations. When you register, you create a new organization. To join an existing organization, you need an invite link from an organization member.

Your active organization determines which machines and reports you see in the dashboard. If you belong to multiple organizations, you can switch between them in your profile.