Console Access

The Cubewire console at wallet.cubewire.com is where you manage vaults, configure policies, approve transactions, and administer your team.

Go to wallet.cubewire.com.
Click Sign Up.
Enter your email and create a password.
Verify your email via the confirmation link.
Create an organization or accept an invitation to join one.

Note: Every user belongs to at least one organization. You'll either create a new organization during signup or join an existing one via invitation.

Email and password

Go to wallet.cubewire.com.
Enter your email and password.
Complete MFA verification if enabled.

Google

Click Continue with Google.
Select your Google account and authorize access.
Complete MFA verification if enabled.

Enterprise SSO

Organizations can configure Single Sign-On for centralized identity management.

Protocol	Compatible providers
SAML 2.0	Okta, Azure AD, OneLogin
OIDC	Any OpenID Connect provider

SSO is configured at the organization level. Contact your admin or support@cubewire.io to set it up.

Multi-factor authentication

Add a second layer of security using a time-based one-time password (TOTP) from an authenticator app like Google Authenticator, Authy, or 1Password.

Enable MFA

Go to Settings → Security.
Click Enable MFA.
Scan the QR code with your authenticator app.
Enter the 6-digit code to confirm.
Save your backup codes somewhere secure.

Important: Backup codes are your recovery option if you lose access to your authenticator app. Store them in a password manager or other secure location.

Enter your email and password.
Enter the 6-digit code from your authenticator app.

Session management

Sessions remain active while you're using the dashboard. Inactive sessions expire after a configurable timeout, and closing your browser ends your session.

Sign out: Click your profile icon → Sign Out.

Review active sessions: Go to Settings → Security → Active Sessions to view and revoke sessions you don't recognize.

Switching organizations

If you belong to multiple organizations:

Click the organization name in the navigation bar.
Select the organization to switch to.

Each organization has its own vaults, policies, users, and settings—switching changes your entire context.

Inviting team members

Administrators can add users to the organization:

Go to Settings → Team.
Click Invite Member.
Enter their email address.
Assign one or more roles.
Send the invitation.

The invitee receives an email with a link to join your organization.

Troubleshooting

Problem	Solution
Forgot password	Click Forgot Password on the sign-in page
MFA code rejected	Check that your device clock is synchronized—TOTP is time-sensitive
Lost MFA device	Use a backup code, or contact support@cubewire.io to reset
Account locked	Contact support@cubewire.io

SSO issues

Problem	Solution
SSO option not appearing	Confirm your email domain is configured for SSO
Redirect fails	Contact your IT admin to verify SSO configuration
Access denied after SSO	Your account may not be provisioned—contact your admin

Programmatic Access — API authentication with OAuth 2.0

Console Access

The Cubewire console at wallet.cubewire.com is where you manage vaults, configure policies, approve transactions, and administer your team.

Go to wallet.cubewire.com.
Click Sign Up.
Enter your email and create a password.
Verify your email via the confirmation link.
Create an organization or accept an invitation to join one.

Note: Every user belongs to at least one organization. You'll either create a new organization during signup or join an existing one via invitation.

Email and password

Go to wallet.cubewire.com.
Enter your email and password.
Complete MFA verification if enabled.

Google

Click Continue with Google.
Select your Google account and authorize access.
Complete MFA verification if enabled.

Enterprise SSO

Organizations can configure Single Sign-On for centralized identity management.

Protocol	Compatible providers
SAML 2.0	Okta, Azure AD, OneLogin
OIDC	Any OpenID Connect provider

SSO is configured at the organization level. Contact your admin or support@cubewire.io to set it up.

Multi-factor authentication

Add a second layer of security using a time-based one-time password (TOTP) from an authenticator app like Google Authenticator, Authy, or 1Password.

Enable MFA

Go to Settings → Security.
Click Enable MFA.
Scan the QR code with your authenticator app.
Enter the 6-digit code to confirm.
Save your backup codes somewhere secure.

Important: Backup codes are your recovery option if you lose access to your authenticator app. Store them in a password manager or other secure location.

Enter your email and password.
Enter the 6-digit code from your authenticator app.

Session management

Sessions remain active while you're using the dashboard. Inactive sessions expire after a configurable timeout, and closing your browser ends your session.

Sign out: Click your profile icon → Sign Out.

Review active sessions: Go to Settings → Security → Active Sessions to view and revoke sessions you don't recognize.

Switching organizations

If you belong to multiple organizations:

Click the organization name in the navigation bar.
Select the organization to switch to.

Each organization has its own vaults, policies, users, and settings—switching changes your entire context.

Inviting team members

Administrators can add users to the organization:

Go to Settings → Team.
Click Invite Member.
Enter their email address.
Assign one or more roles.
Send the invitation.

The invitee receives an email with a link to join your organization.

Troubleshooting

Problem	Solution
Forgot password	Click Forgot Password on the sign-in page
MFA code rejected	Check that your device clock is synchronized—TOTP is time-sensitive
Lost MFA device	Use a backup code, or contact support@cubewire.io to reset
Account locked	Contact support@cubewire.io

SSO issues

Problem	Solution
SSO option not appearing	Confirm your email domain is configured for SSO
Redirect fails	Contact your IT admin to verify SSO configuration
Access denied after SSO	Your account may not be provisioned—contact your admin

Programmatic Access — API authentication with OAuth 2.0

Console Access

The Cubewire console at wallet.cubewire.com is where you manage vaults, configure policies, approve transactions, and administer your team.

Go to wallet.cubewire.com.
Click Sign Up.
Enter your email and create a password.
Verify your email via the confirmation link.
Create an organization or accept an invitation to join one.

Note: Every user belongs to at least one organization. You'll either create a new organization during signup or join an existing one via invitation.

Email and password

Go to wallet.cubewire.com.
Enter your email and password.
Complete MFA verification if enabled.

Google

Click Continue with Google.
Select your Google account and authorize access.
Complete MFA verification if enabled.

Enterprise SSO

Organizations can configure Single Sign-On for centralized identity management.

Protocol	Compatible providers
SAML 2.0	Okta, Azure AD, OneLogin
OIDC	Any OpenID Connect provider

SSO is configured at the organization level. Contact your admin or support@cubewire.io to set it up.

Multi-factor authentication

Add a second layer of security using a time-based one-time password (TOTP) from an authenticator app like Google Authenticator, Authy, or 1Password.

Enable MFA

Go to Settings → Security.
Click Enable MFA.
Scan the QR code with your authenticator app.
Enter the 6-digit code to confirm.
Save your backup codes somewhere secure.

Important: Backup codes are your recovery option if you lose access to your authenticator app. Store them in a password manager or other secure location.

Enter your email and password.
Enter the 6-digit code from your authenticator app.

Session management

Sessions remain active while you're using the dashboard. Inactive sessions expire after a configurable timeout, and closing your browser ends your session.

Sign out: Click your profile icon → Sign Out.

Review active sessions: Go to Settings → Security → Active Sessions to view and revoke sessions you don't recognize.

Switching organizations

If you belong to multiple organizations:

Click the organization name in the navigation bar.
Select the organization to switch to.

Each organization has its own vaults, policies, users, and settings—switching changes your entire context.

Inviting team members

Administrators can add users to the organization:

Go to Settings → Team.
Click Invite Member.
Enter their email address.
Assign one or more roles.
Send the invitation.

The invitee receives an email with a link to join your organization.

Troubleshooting

Problem	Solution
Forgot password	Click Forgot Password on the sign-in page
MFA code rejected	Check that your device clock is synchronized—TOTP is time-sensitive
Lost MFA device	Use a backup code, or contact support@cubewire.io to reset
Account locked	Contact support@cubewire.io

SSO issues

Problem	Solution
SSO option not appearing	Confirm your email domain is configured for SSO
Redirect fails	Contact your IT admin to verify SSO configuration
Access denied after SSO	Your account may not be provisioned—contact your admin

Programmatic Access — API authentication with OAuth 2.0

Console Access

The Cubewire console at wallet.cubewire.com is where you manage vaults, configure policies, approve transactions, and administer your team.

Go to wallet.cubewire.com.
Click Sign Up.
Enter your email and create a password.
Verify your email via the confirmation link.
Create an organization or accept an invitation to join one.

Note: Every user belongs to at least one organization. You'll either create a new organization during signup or join an existing one via invitation.

Email and password

Go to wallet.cubewire.com.
Enter your email and password.
Complete MFA verification if enabled.

Google

Click Continue with Google.
Select your Google account and authorize access.
Complete MFA verification if enabled.

Enterprise SSO

Organizations can configure Single Sign-On for centralized identity management.

Protocol	Compatible providers
SAML 2.0	Okta, Azure AD, OneLogin
OIDC	Any OpenID Connect provider

SSO is configured at the organization level. Contact your admin or support@cubewire.io to set it up.

Multi-factor authentication

Add a second layer of security using a time-based one-time password (TOTP) from an authenticator app like Google Authenticator, Authy, or 1Password.

Enable MFA

Go to Settings → Security.
Click Enable MFA.
Scan the QR code with your authenticator app.
Enter the 6-digit code to confirm.
Save your backup codes somewhere secure.

Important: Backup codes are your recovery option if you lose access to your authenticator app. Store them in a password manager or other secure location.

Enter your email and password.
Enter the 6-digit code from your authenticator app.

Session management

Sessions remain active while you're using the dashboard. Inactive sessions expire after a configurable timeout, and closing your browser ends your session.

Sign out: Click your profile icon → Sign Out.

Review active sessions: Go to Settings → Security → Active Sessions to view and revoke sessions you don't recognize.

Switching organizations

If you belong to multiple organizations:

Click the organization name in the navigation bar.
Select the organization to switch to.

Each organization has its own vaults, policies, users, and settings—switching changes your entire context.

Inviting team members

Administrators can add users to the organization:

Go to Settings → Team.
Click Invite Member.
Enter their email address.
Assign one or more roles.
Send the invitation.

The invitee receives an email with a link to join your organization.

Troubleshooting

Problem	Solution
Forgot password	Click Forgot Password on the sign-in page
MFA code rejected	Check that your device clock is synchronized—TOTP is time-sensitive
Lost MFA device	Use a backup code, or contact support@cubewire.io to reset
Account locked	Contact support@cubewire.io

SSO issues

Problem	Solution
SSO option not appearing	Confirm your email domain is configured for SSO
Redirect fails	Contact your IT admin to verify SSO configuration
Access denied after SSO	Your account may not be provisioned—contact your admin

Programmatic Access — API authentication with OAuth 2.0

Console Access

Sign up

Sign-in methods

Email and password

Google

Enterprise SSO

Multi-factor authentication

Enable MFA

Sign in with MFA

Session management

Switching organizations

Inviting team members

Troubleshooting

Sign-in issues

SSO issues

Next

Console Access

Sign up

Sign-in methods

Email and password

Google

Enterprise SSO

Multi-factor authentication

Enable MFA

Sign in with MFA

Session management

Switching organizations

Inviting team members

Troubleshooting

Sign-in issues

SSO issues

Next

Console Access

Sign up

Sign-in methods

Email and password

Google

Enterprise SSO

Multi-factor authentication

Enable MFA

Sign in with MFA

Session management

Switching organizations

Inviting team members

Troubleshooting

Sign-in issues

SSO issues

Next

Console Access

Sign up

Sign-in methods

Email and password

Google

Enterprise SSO

Multi-factor authentication

Enable MFA

Sign in with MFA

Session management

Switching organizations

Inviting team members

Troubleshooting

Sign-in issues

SSO issues

Next