Accounts & Login

TwoWeeks uses accounts to persist sessions, defaults, and history. Everyone who joins a session signs in with an account; only hosts need host access to create sessions.

---

Creating a Host Account

You can create a host account from the home page:

1. Click the Host a session tab
2. Click Create account (shown if you are not logged in)
3. Fill in the registration form:

Field	Requirement
Username	3–32 characters, letters, numbers, underscores, and dashes only
Display name	Your visible name (1–60 characters)
Password	8 to 72 characters (at most 72 bytes: accented letters, emoji and non-Latin characters count as 2-4); must include a lowercase letter AND a number or special character

4. Optionally tick Request host access if you want to create and manage sessions. When unchecked you can still create an account and request host access later: open My account and choose Request host access.

5. Click Register — you are logged in immediately.

If you requested host access:

• If the administrator has enabled auto-approval, you get host access immediately.
• Otherwise, your request goes to the admin’s pending-requests list. You can use the account but cannot create sessions until approved.

Logging In

1. Click the Host a session tab
2. Enter your username and password
3. Click Login

Your login session is valid for 8 hours by default (configurable via AUTH_SESSION_TTL_HOURS). Each API request extends the session lifetime automatically.

Changing Your Password

1. Open the hamburger menu and select Account
2. In the Change password section:
   • Enter your current password
   • Enter a new password (8 to 72 characters, must include a lowercase letter AND a number or special character)
   • Re-enter the new password to confirm
3. Click Change password

Active estimation sessions are not affected. The new password takes effect on your next login.

Changing Your Username

From the Account page, update your display name or username. Username changes do not affect active sessions.

Deactivating Your Account

From the Account page, you can deactivate your account. While deactivated:

• You cannot create or manage sessions
• Active login sessions are invalidated
• Your sessions and data are preserved

To get access back, ask an admin to reactivate your account — a deactivated account can no longer sign in or use any host feature, so it cannot reactivate itself.

Admin-Created Accounts

A system administrator can create host accounts from the admin dashboard. When created this way:

• A one-time password is generated and shown to the admin (displayed once)
• The host role is granted immediately — no approval needed
• You must change your password on first login

Session Defaults

From the Account page you can configure defaults that apply to every new session you create:

Section	Settings
Estimation	Estimation type (Story Points / Time), value set, timer duration
Jira	URL, email, server type, estimate field ID
GitLab	URL, PAT, project ID, label prefix, default filters

These are pre-filled when you create a session but can be overridden per session.

Developer Accounts

Developers do not need accounts to join estimation sessions — just a session code and a display name. However, if the Teams feature is enabled (ENABLE_TEAMS=true), developers can optionally create an account via the developer registration page to be added to teams by username.