Website Account, Email Verification and Password Recovery

Learn registration, email confirmation, sign-in, password recovery, setting a new password, and what happens when an account is suspended.

Content reviewed
Applies to: GiftVeri website platform account; not for Apple or other brand accounts

First tell the website account and brand accounts apart

Your GiftVeri website account is used to sign in to the account center, view software plans and orders, and sign in to the Windows client with the same email. Apple or other brand accounts are used only for that brand’s flow. The platform account and brand accounts are managed separately; changing your GiftVeri password does not change your Apple or other brand passwords.

The website never asks you to enter brand passwords, gift card numbers, PINs, verification codes or proxy credentials in the platform registration form.

Create a GiftVeri website account

From create account, enter a display name, your usual email, a new password and a confirmation. The new password must be 12–128 characters, match in both fields, and should not be reused from other websites.

After you submit, the service handles registration according to the current email confirmation setting: if a valid session is established, you go to the account center; if email verification is needed, the page uses a uniform message asking you to sign in after confirming. The registration message never states whether a given email already exists.

Complete email verification

When email confirmation is needed, open the latest verification email in the inbox for this registration. The verification link returns to GiftVeri’s controlled authentication address and then to the account center; if the link is expired, used or has incomplete parameters, the page asks you to sign in again or request a new link.

Email delivery depends on the Supabase email service, the sender configuration and the recipient’s filters. The website code and callback path are implemented, but this round of local content review did not complete real delivery testing to arbitrary external inboxes, so a page showing “sent” does not prove the email arrived.

If you do not receive the email, check the address spelling, your spam folder and the latest email from the same flow. Do not submit many registration or recovery requests in a row; if the operator needs to help, provide only the email address and the time it happened, not the email password or verification code.

Sign in to the website and account center

After completing any required email verification, sign in from sign in with your platform email and password. A successful sign-in goes to the account center; if sign-in fails, the page uses a uniform error message asking you to check the email, password and email verification status, without revealing whether a specific account exists.

The account center lets you change your display name and view your sign-in email, account status, software plan and recent orders. The current interface does not change the sign-in email directly, and the platform sign-in state never completes any brand check on its own.

Request a recovery email when you forget your password

From forgot password, enter your registered email. Whether or not that email is registered, the page returns the same generic message, to avoid enumerating accounts through the recovery form.

If the email arrives, open the link from the latest recovery email. The link first establishes a controlled recovery session, then goes to the set-new-password page. Do not bookmark or manually open the set-new-password address directly; without a valid recovery session, the password update cannot be completed.

Set a new password and sign in again

On the page opened by a valid recovery link, enter a 12–128 character new password and confirm it. After a successful save, the website clears the local recovery session and returns to the sign-in page; sign in again with the new password.

If the recovery link is expired, used or the recovery session does not exist, return to the forgot-password page and request again. Do not send the recovery link, verification code, new password or browser session to anyone, and do not use the same link repeatedly on multiple devices at once.

Account suspension and service not connected

When the account status is suspended, a signed-in user is moved to the “account unavailable” page and can only sign out and contact the website administrator to check. Resetting the password does not bypass the suspended status or automatically restore software plans.

When Supabase is not configured in a local or new environment, the registration and sign-in forms are disabled and show “account service not connected”. This means the current environment lacks the account service configuration; it is not a wrong password and cannot be fixed by resubmitting.

Relationship to the Windows client platform sign-in

The Windows client signs in with the same GiftVeri email and password. After a website password recovery, an old client session may need to sign in again; recovering the website account does not initialize an Apple or other brand session or resend card checks.

FREE, PRO permissions, session recovery and expired authorization are covered in the platform sign-in and authorization guide. Software plans and brand support status still need to be checked separately.

Protect your account and recovery information

  • Only enter your platform password on GiftVeri’s own pages.
  • Do not share verification emails, recovery links, verification codes, cookies or sign-in tokens.
  • Do not put full card numbers or brand account details in public problem reports.
  • After a password recovery, close the recovery pages you no longer need and sign in again with the new password.
  • If you did not start a recovery request yourself, do not open the email link and do not forward the email to anyone.

To troubleshoot a sign-in or recovery problem, note the time, the current page, the redacted message and whether you received the email; do not submit passwords or recovery links. The full list of account fields and security feedback boundaries is in the privacy notes.