Sign-in Problems | Coldsea Deploy

A reference for the messages you can hit while signing in, verifying your email, or setting up two-factor authentication. For the sign-in procedure itself, see Signing in.

Message	What it means	What to do
Invalid email or password. Please try again.	Your email, password, or authentication code was not accepted.	See One message covers three problems below.
Enter the code from your authenticator app to continue.	Your password was accepted. Your account has two-factor authentication and no code was supplied.	Enter the current 6-digit code and sign in again.
Unable to log in. Please check your credentials and try again.	The sign-in was refused rather than rejected as wrong.	Your account or organization may be disabled. Ask an administrator at your organization.
Unable to log in. Please try again later.	Something other than a credential problem.	Most often this is a temporary block after repeated failures. See Too many attempts.
Please verify your email before logging in. Check your inbox or resend the verification email.	The account exists but the address was never confirmed.	Open the verification link in your inbox. If it has expired, sign up again with the same address to get a new one.
System Unavailable	Coldsea Deploy cannot reach its own services. Nothing is wrong with your account.	Wait and try again.

One message covers three problems

"Invalid email or password. Please try again." appears when any one of three things is wrong:

The email address has no account.
The password does not match.
The password matched, but the 6-digit authentication code did not.

The message stays the same in all three cases on purpose. Telling you which part failed would tell an attacker the same thing, including whether an address has an account at all.

The third case is the one that catches people out. If you are confident in your password, the code is the likely culprit. Codes rotate every 30 seconds and depend on your device's clock, so wait for a fresh code rather than retyping the same digits, and check that the clock on the device running your authenticator app is set automatically.

Too many attempts

Repeated failed sign-ins are blocked temporarily. By default the limit is 5 failed attempts within 15 minutes, applied separately to your email address and to the network you are connecting from. Successful sign-ins do not count.

While blocked you see "Unable to log in. Please try again later." rather than a message naming the block. Waiting out the window clears it. There is nothing to reset and no lockout to lift.

Failed authentication codes count towards the same limit as failed passwords. Working through a stack of stale codes can block you as effectively as guessing at a password.

Messages during two-factor setup

Message	What it means
That code did not match. Try again.	The 6-digit code was rejected. The QR code stays on screen so you can try a fresh code without starting over.
Could not start MFA setup. Please try again.	Setup could not begin. Select Try again to reload.

When you have lost your authenticator

Use a recovery code. On the sign-in page, select Use a recovery code, then enter one of the 10-character codes you saved during setup.

If you have no recovery codes left, you cannot get in on your own, and no one inside your organization can reset two-factor authentication for you today. Ask an administrator at your organization to raise it through contact.

Getting more help

If you can still sign in, open Help & support from the sidebar to ask for help or report a problem. If you are locked out, use Contact support on the sign-in page or email support@coldsea.io. See Getting help for what each request type does.

Messages after you are signed in

These appear as a panel over whatever you were doing.

Panel	What it means	What to do
Session Expired	Your session ended, usually by sitting idle past its lifetime.	Select Log In.
Access Denied	Your role does not carry permission for what you tried.	Select Dismiss. See Roles and permissions.
Upgrade Required	The action needs a capability your plan does not include.	Select Upgrade to go to billing, or Cancel.

If your organization doesn't have an active subscription, you are moved to the Limited access page instead, which lists what you can do next.

You can also be moved to the organization list without a message. That happens when the organization your session was using is no longer usable, because it was disabled or your membership in it ended. Pick another organization, or join one.

Verifying your email

The verification page reports one of these:

Message	What it means
Verifying your email...	In progress.
Email verified! Finalizing your account...	Confirmed, account being set up.
Account ready! Redirecting to sign in...	Finished. You are being sent to the sign-in page.
Email verification failed. The link may have expired.	The link is no longer valid.
Invalid verification link. Please request a new verification email.	The page was opened without a usable link, for example if the URL was truncated by an email client.

Resetting your password

Select Forgot Password? on the sign-in page, enter your address, and select Send Reset Link. The page confirms with "Reset Link Sent" and lists what to do next.

Resending is rate-limited. The button counts down and reads "Wait Ns" until you can send again.

Some things look like being locked out but happen after you are already signed in:

Every feature page sends you to Billing. Your organization has no active subscription. See Managing your subscription.
You reach the app but have no organization. Your account works and is not attached to an organization yet. See Joining an organization.
A page you used before is missing from the sidebar. Navigation hides what your role or plan does not allow. See Roles and permissions.