GOCOSYS Account
One account for every GOCOSYS application — how it works, and how to manage it.
GOCOSYS Account is the single sign-in behind every connected GOCOSYS application. You create one account here, and use it everywhere — the applications never see your password, and you decide what each one is allowed to read.
Your account dashboard
Every page adapts to small screens — the sidebar becomes a drawer and wide tables scroll inside their card.
What you can do here
| Create an account | Sign up, verify your email, and activate the account. |
|---|---|
| Sign in | The two-step sign-in, two-factor codes, and recovering a forgotten password. |
| Profile | Your name, contact details, photo and the information applications can receive. |
| Security & 2FA | Change your password, turn on two-factor authentication, keep recovery codes. |
| Devices & activity | See where you are signed in, sign devices out, and review sign-in history. |
| Connected apps | Which applications you have authorised, and how to revoke them. |
| Privacy & data | What is stored about you, and how to request deletion. |
For developers
Building an application that signs people in with GOCOSYS? The OAuth 2.0 & OpenID Connect guide documents the full authorization-code flow, every endpoint, scopes, token lifetimes and error codes.
Machine-readable configuration lives at
https://account.gocosys.com/.well-known/openid-configuration. Point your
OIDC library at that URL instead of hardcoding endpoints.
How your account stays protected
- Passwords are never stored. Only an Argon2id hash is kept, which cannot be reversed.
- Two-factor authentication is available to every account, with recovery codes for when you lose your device.
- Every sign-in is recorded with its device and IP, so unfamiliar access is visible to you.
- Applications get only what you grant. Consent is per-application and revocable at any time.