Authentication

Secure authentication options for the GitScrum Chrome Extension.

Sign In Methods

The extension supports multiple authentication methods:

Email and Password

Sign In

1. Click the GitScrum extension icon
2. Enter your email address
3. Enter your password
4. Click Sign in

Password Requirements

Use the same password you use on the GitScrum web app. Password reset is available at app.gitscrum.com.

Forgot Password

1. Click Forgot password? on the login screen
2. Enter your email address
3. Click Send reset link
4. Check your email for the reset link
5. Reset your password on the web app
6. Return to the extension and sign in

Multi-Factor Authentication

If MFA is enabled on your account, an additional step is required:

Setup

MFA is configured in your GitScrum account settings on the web app:

1. Log in to app.gitscrum.com
2. Go to Profile → Security
3. Enable Two-factor authentication
4. Scan the QR code with your authenticator app
5. Enter the verification code to confirm

Sign In with MFA

1. Enter your email and password
2. The extension shows a code input field
3. Open your authenticator app
4. Enter the 6-digit code
5. Click Verify

Supported Authenticator Apps

Any TOTP-compatible authenticator app works.

Code Timing

• Codes refresh every 30 seconds
• If a code fails, wait for the next code
• The authenticator shows a countdown timer

OAuth Providers

Google

1. Click the Google button
2. A popup opens with Google account selection
3. Choose your Google account
4. Grant permission to GitScrum
5. The popup closes and you are signed in

Requirements:

• Google account connected in GitScrum profile settings
• Popups allowed for the extension

GitHub

1. Click the GitHub button
2. A popup opens with GitHub authorization
3. Click Authorize
4. The popup closes and you are signed in

Requirements:

• GitHub account connected in GitScrum profile settings
• Popups allowed for the extension

Facebook

1. Click the Facebook button
2. A popup opens with Facebook login
3. Log in to Facebook if needed
4. Grant permission to GitScrum
5. The popup closes and you are signed in

Requirements:

• Facebook account connected in GitScrum profile settings
• Popups allowed for the extension

Connecting OAuth Providers

Before using OAuth in the extension:

1. Log in to app.gitscrum.com
2. Go to Profile → Connected accounts
3. Click Connect next to your preferred provider
4. Complete the authorization flow
5. The account is now linked

Session Management

Session Duration

• Sessions remain active for 30 days
• Activity extends the session
• Background token refresh keeps you signed in

Sign Out

1. Click the GitScrum extension icon
2. Click the Sign out button in the header
3. Your session is terminated
4. Authentication data is cleared

Automatic Sign Out

You are signed out automatically when:

• Your session expires
• Your password is changed
• Your account is suspended
• You sign out from the web app with "Sign out everywhere"

Token Storage

How Tokens Are Stored

The extension stores authentication tokens in Chrome's local storage:

Security Measures

Clearing Data

To clear all extension data:

1. Right-click the GitScrum icon
2. Click Manage extension
3. Click Clear site data
4. Confirm the action

This signs you out and removes all stored data.

Security Best Practices

Recommendations

1. Enable MFA — Adds a second layer of security
2. Use OAuth — Leverages provider security
3. Regular sign out — On shared computers
4. Keep browser updated — Security patches

What the Extension Does NOT Do

Troubleshooting

OAuth Popup Blocked

1. Check browser popup blocker settings
2. Look for a blocked popup indicator in the address bar
3. Allow popups from the extension
4. Try the OAuth button again

MFA Code Invalid

1. Check your device clock is accurate
2. Wait for the next code (30 seconds)
3. Verify you are using the correct authenticator entry
4. Try entering the code immediately after it refreshes

Session Expired

1. Your session timed out after inactivity
2. Click the extension icon
3. Sign in again

Account Locked

Too many failed sign-in attempts locks your account:

1. Wait 15 minutes
2. Reset your password if needed
3. Contact support if the issue persists

Next Steps

• Getting Started — Complete setup guide
• Task Creation — Create tasks from browser
• Overview — Extension overview