This article explains how authentication works on CheckHub, how we protect your account, and what you can expect during login, logout, and password management.
How to Log In
You can access your CheckHub admin space using one of the following authentication methods:
1. Email & Password
Enter the email associated with your CheckHub account and your personal password.
2. Two-Factor Authentication (2FA) by Email
For increased protection, CheckHub supports email-based 2FA.
If enabled for your account, a short verification code will be sent to your email after a successful password entry. You must enter this code to complete the login process.
3. SSO (Azure AD & Google Workspace via Auth0)
CheckHub supports Single Sign-On through:
- Microsoft Azure Active Directory
- Google Workspace
If SSO is configured for your organization, you will authenticate directly through your identity provider.
Password Requirements & Policy
CheckHub enforces a strong password policy to ensure the security of your account:
- Minimum 8 characters
- Must contain at least one letter and one number
- Supports special characters
- Case-sensitive
When using the Reset Password feature, the new password must be different from the previous one.
Password Expiration
If your administrator created your account manually, they may require your password to be marked as expired.
In this case, you can log in using the temporary password, but you will be forced to change it immediately before accessing any part of the platform.
Session Timeout
For your protection, CheckHub automatically monitors session activity:
- If you remain inactive for a long period, a popup will ask you to confirm whether you want to stay logged in.
- Without confirmation, your session will automatically log out to prevent unauthorized access.
How Passwords Are Stored
CheckHub never stores clear or readable passwords.
All passwords are stored using:
- A secure hashing algorithm, and
- A unique, randomly generated salt per user
This ensures that even if the database were compromised, it would be extremely difficult to retrieve actual passwords.
Single Sign-On (SSO)
If your organization uses SSO through Azure or Google Workspace:
- Password policies (expiration, complexity, rotation) are managed by your identity provider
- User access rights are fully controlled by your organization’s administrator
- CheckHub does not store or validate your password in this case
If you’re interested in enabling SSO for your workspace, contact our support team and we’ll guide you through the setup.