Log in with Google
Why use Google login
Three reasons most teams pick it:
- Faster. 30 seconds vs about 60 seconds for email and password.
- No password fatigue. Your Google account already has 2FA; we inherit it.
- Built-in MFA. If your Google account requires 2FA, AskVault login does too.
If your team uses Google Workspace, this is usually the right default.
First-time signup via Google
Five clicks:
- Visit
askvault.co/signup. - Click "Continue with Google".
- Pick the Google account.
- Approve the permissions screen. We request: profile, email, and openid. No Google Drive, Calendar, or Gmail content access.
- Redirected to onboarding. Fresh AskVault account in under 30 seconds.
The first signup auto-verifies the email (Google already confirmed it). No verification step needed.
Login flow
Once your account exists:
- Visit
askvault.co/login. - Click "Continue with Google".
- Pick the account.
- Redirected to your default workspace.
If multiple Google accounts are signed in to your browser, the account picker shows up. Otherwise you're in directly.
Permissions we request
Three scopes, all read-only:
openid. Confirms Google authenticated the user.email. Reads your verified email address.profile. Reads your name and profile picture (used in the dashboard).
We never request Drive, Calendar, Gmail, or Contacts. If a future integration needs these, you grant them explicitly per integration (e.g., Google Drive knowledge integration).
Revoke our access any time at myaccount.google.com/permissions.
Linking Google to an existing email-and-password account
If you signed up with email and password and want to add Google as a login method:
- Log in via email and password.
- Open Account Settings > Linked Accounts.
- Click "Link Google account".
- Pick the matching Google account.
The Google account's email must match (or be claimable from) your AskVault email. After linking, both login methods work. Unlink any time under the same panel.
What if email mismatch happens
If your AskVault account uses you@yoursite.co but you click "Continue with Google" with you@gmail.com, we treat it as a new account creation rather than a login. Two ways to avoid this:
- Use the matching Google account.
- Link the mismatched Google account from inside Account Settings (verifies you control the AskVault account first).
This prevents account takeover via Google account hijack.
Google Workspace SSO (for teams)
If your company uses Google Workspace and wants to enforce Google login for everyone on the team:
- Account Settings > Team > SSO Configuration.
- Pick "Require Google Workspace login".
- Set the allowed domain (e.g.,
yourco.com). - Save.
After this, team members can only log in via Google with an email on the allowed domain. Email and password disabled for those team members. Available on Business and Enterprise plans.
Session behavior
Google login follows the same session model as email and password:
- Access token. 15 minutes.
- Refresh token. 30 days.
- Idle logout at 14 days inactive.
Logging out of Google doesn't auto-log out of AskVault. Log out separately if you want both ended.
Revoking Google access
Two paths:
From AskVault.
- Account Settings > Linked Accounts.
- Click "Unlink Google".
After unlinking, you can no longer log in via Google. If you don't have a password set, set one first under Account Settings > Security > Set Password.
From Google.
- Visit
myaccount.google.com/permissions. - Find AskVault.
- Click "Remove access".
This also unlinks on our side within 60 seconds (Google sends a revocation webhook).
Common pitfalls
"Account already exists with this email" error. You signed up via email and password with the same address. Log in with password first, then link Google under Account Settings.
Wrong Google account picked. Click "Sign out of Google" in the picker, then re-pick. Or sign out from myaccount.google.com and retry.
Workspace SSO blocks login. Your account is on a team requiring Google Workspace SSO and you're not on the allowed domain. Ask the team admin to add your domain or assign you a workspace email.
Lost access to the Google account. Reach out to support with proof of identity (billing email match, payment-method match) and we'll move you to email and password.
FAQ
Is Google login secure?
Yes. We use Google's standard OAuth 2.0 flow. We never see your Google password. If your Google has 2FA, AskVault inherits it.
Can I use both Google and password on the same account?
Yes. Link them under Account Settings. Both methods work after linking.
Does Google login work for free accounts?
Yes. Available on every plan including Free.
What data does AskVault read from Google?
Only your email, name, and profile picture (the three scopes we request). No Gmail, no Drive, no Calendar.
Can I disable email-and-password login and require Google for my team?
Yes via Google Workspace SSO mode. Available on Business and Enterprise plans.