Sign-in methods
Superheat CN has no passwords. You sign in with a six-digit code sent to your phone or your email; if you have turned on two-factor authentication, you also enter a code from your authenticator app.
| Method | What you do | Creates the account too |
|---|---|---|
| Phone code (default) | Enter your mainland-China mobile number, then the six digits from the text message | Yes |
| Email code | Enter your address, then the six digits from the email | Yes |
| Authenticator app (TOTP) | After either of the above, enter the six digits your app shows | No — it is a second factor |
Sign in with a phone code
- Open console.superheat.cloud. The sign-in card has Phone (手机号) selected.
- Enter your mainland-China mobile number and select Continue with SMS.
- Type the six-digit code from the text message. Pasting works too — one paste fills all six boxes.
- The console verifies the code and takes you to the dashboard.
A phone code is valid for 300 seconds. The code screen also offers Change number and Resend code; after a code is sent, you wait 60 seconds before you can request another.
Only mainland-China mobile numbers (+86) are supported today. Numbers from Hong Kong, China; Macao, China; and Taiwan, China are not switched on yet — until they are, use an email code.
Sign in with an email code
- Choose Email (邮箱) on the sign-in card, enter your address and select Continue with email.
- Look for the message from noreply@superheat.cloud and type the six-digit code in it. The email carries only the code — no sign-in link.
- The console verifies the code and takes you to the dashboard.
An email code is valid for 600 seconds (10 minutes). The code screen offers Change email and Resend code, again with a 60-second wait before another code.
Both methods sign you in and create accounts. There is no separate registration page.
Phone and email accounts stay separate
A mobile number and an email address are two separate accounts, each with its own personal organization, balance and instances. The console has no way to link them, so keep signing in the same way.
An account that signs in by phone only has no email. In the team list and the API it shows as its phone number (+86…), and because invitations are addressed to an email, it cannot accept one. To join someone else's organization, sign in with email. See Invite members.
No third-party sign-in
Superheat CN offers no Google, GitHub or other third-party sign-in, and Settings has nowhere to connect a third-party account.
Second factors
There is one second factor: an authenticator app (TOTP). Once you enroll one, the console asks for it after your phone or email code, before it lets you in. The API refuses a session token that has not completed the second step as well (403 MFA_REQUIRED). See Two-factor authentication.
The Passkeys card in Settings reads "Passkeys aren’t enabled for this workspace yet." (此工作区尚未启用通行密钥。) — Superheat CN does not offer passkeys.
API keys are not a sign-in method
An shk_ API key authenticates scripts against the REST API. It acts as a member of its own organization and is rejected on account endpoints and on every admin action. It cannot be used to sign in to the console. See API keys.
Signing out
Select Sign out on the account card in Settings, or open the account menu at the right of the top bar and choose Sign out. The session ends and you return to the sign-in screen. Signing back in repeats the first factor, and any second factor you have enrolled.