PureStats
Sign in

PureStats documentation

SSO, 2FA and sessions

Manage connected accounts, two-factor authentication and active sessions.

Account security settings live in the profile area.

Connected accounts

PureStats supports Google and GitHub SSO. Users can connect or disconnect providers from their profile when it is safe to do so.

SSO-only accounts should set a password if they want email/password login as a fallback.

Two-factor authentication

2FA is optional for all accounts, including administrators. When enabled, it adds a time-based one-time password step after login. During setup:

  1. Scan the QR code with an authenticator app.
  2. Enter a current code.
  3. Store recovery codes if provided.
  4. Confirm that 2FA is marked active.

If setup fails, check device time synchronization and retry with a fresh code.

Active sessions

The profile shows active sessions. Users can end individual sessions or log out all other devices.

Sensitive changes

Administrator actions and human approvals for agent actions can be confirmed with the current account password; enabling 2FA is not required for administrators. An authenticator code remains an optional alternative for accounts that have configured 2FA.

After password changes or 2FA reset, PureStats can revoke other sessions. This limits risk when account credentials change.