Bot challenge (Turnstile)
Sign-in, sign-up, and forgot-password screens include a Cloudflare Turnstile widget. You must complete the challenge before Sign in, Create account, or Send link becomes available. If verification fails, the form shows a retry message and resets the widget.
Local development and automated tests use Cloudflare’s documented always-pass test keys. Production builds use real Turnstile keys configured at deploy time.
Sign up
Register at /signup with First name, Last name, email, and password (at least 12 characters). New accounts are verified immediately and you are signed in after a successful create.
If a previous signup attempt left your account without a password (for example, a network interruption), submitting the form again with the same email repairs the account and signs you in.
If the email already has credentials, Probara responds with a neutral Check your inbox screen that does not reveal whether the address was new. Use Sign in or Forgot your password from that screen.
If sending email fails on that collision path (rare), the screen shows a Retry button instead of a generic error.
Log in and log out
- Log in:
/login - Log out: user menu in the app header → Log out
Sessions use a secure HttpOnly cookie. Closing the browser does not always end the session until logout or expiry.
Forgot password
Use the reset flow from /login (forgot password link). You receive an email with a time-limited link to set a new password. The email is sent in the same language as the app UI you used when requesting the reset (English or Spanish).
Security notes
- Use a unique password for your Probara account.
- Invitation signup locks the email field to the invited address.