Login & Password Reset

Learn how to securely log into AuraDash using your standard credentials, and manage your account recovery and password settings.

Login

First-Time Setup

When launching AuraDash for the first time, use the following default admin credentials:

Username:admin

Password:AuraDash@2026

⚠️ SECURITY WARNING: You must change these default credentials immediately after your first login to prevent unauthorized access.

Standard Authentication

Once the initial setup is complete, you can securely access the platform using your updated username and password credentials.

Failed Attempt Lockout

To prevent brute-force attacks, AuraDash enforces a rate limit of 5 failed login attempts per minute. If this threshold is exceeded, the system will automatically block further login requests.

Session Lifetime

Enabling the "Remember Me" option keeps your session active on the device for 30 days. Otherwise, sessions automatically expire after 7 days.

Password Reset

Recovery Process & Rate Limits

To reset a forgotten password, users can initiate a secure self-service recovery with a rate limit of 5 reset attempts per minute:

Click the "Reset Password" button on the login screen.
Enter your registered email address.
Receive a verification code sent to your email. If the email doesn't arrive, you may request a new code once every minute.
Enter the verification code and set your new password.

💡 Configuration Note: Email delivery services require a subscription to the Cloudflare Workers Paid Plan ($5/month). Ensure your worker environment is correctly configured.

Strong Password Requirements

AuraDash enforces global security standards (based on OWASP guidelines) for all password updates to prevent credential stuffing:

Minimum Length: Must be at least 8 characters long.
Character Variety: Requires at least one uppercase letter, one lowercase letter, one number, and one special character (e.g., @, #, $, %, &, *).
Common Pattern Detection: Passwords containing easy-to-guess patterns, dictionary words, or user-related identifiers (like username or email parts) will be automatically rejected.

Login Errors

Common Errors During Login

Invalid username or password

This message appears if the email or password you entered is incorrect. Double-check your spelling and try again.

This account has been banned

This warning is displayed if an admin has suspended your access. Please contact your organization manager for help.

Too Many Attempts

If you try to log in or reset your password more than 5 times in a single minute, the system will temporarily lock you out to keep your account safe.