NEXOVE One · Live
Auth. One identity for NEXOVE.
Identity for every NEXOVE product.
auth.nexove.in
What it is
Auth is the suite identity provider. You create a personal account with email and an @handle. Passwords are entered only on auth.nexove.in. First-party apps open a popup, run OIDC with PKCE, and receive tokens. They never receive the NEXOVE password.
The problem
Ten products with ten passwords is how suites rot. Auth is the one account. Product databases stay product-owned; Auth owns the person.
Capabilities
- 01Email + handle personal accounts
- 02OIDC: openid, profile, email
- 03Sign in with NEXOVE on first-party apps
- 04Verify email, reset and change password
- 05Same-browser SSO logout across the suite
In product
Create account or sign in on Auth. Verify email when you choose to — unverified emails can still complete OIDC until you confirm. My Account lives on Auth. Sign out from a first-party app walks this browser’s session off Auth and the suite tabs in this browser; other devices stay signed in.
FAQ
What is a handle?
A NEXOVE name, 6–30 characters, a–z, 0–9, and dots. It is not handle@nexovemail.com — Mail uses the same rules for mailbox handles.
Do apps store my password?
No. Passwords exist only on Auth. Apps see tokens.
If I sign out of Mail, am I signed out of One?
In this browser, yes — the SSO logout chain clears first-party tabs. Other devices keep their sessions.