Vesopa Vesopa

Vesopa account · auth.vesopa.com

One account.
Every Vesopa product.

The single sign-in behind the till, the kiosk, the menu, loyalty, gift cards, the back office and the hosting panel. Sign in with an email address, a phone number, a passkey, or an account you already have, and the same account works everywhere.

Sign in or create an account How signing in works

Built and run by Vesopa Software Ltd in the United Kingdom. What we do with your data.

Argon2id password hashing

The memory-hard algorithm OWASP recommends, with a server-side pepper that is not in the database.

Passkeys and two-step verification

Sign in with a fingerprint or face. Authenticator apps and one-time codes are supported too.

PKCE on every application

Public and confidential clients alike. Authorisation codes are single-use and last sixty seconds.

No tracking, no advertising

No third-party analytics and no advertising anywhere on this service. We do not sell personal data.

Getting started

Signing in, step by step

There is nothing to install and no password to invent. The first time you sign in, your account is made for you.

  1. 01

    Enter your email address or mobile number

    Press Sign in on any Vesopa app, or go to auth.vesopa.com. Use the address your venue knows you by. UK mobile numbers can have the code by text.

  2. 02

    Type the six-digit code

    It arrives within a few seconds, from Vesopa. It works once and lasts ten minutes. Not there? Look in junk mail, or press Send another code.

  3. 03

    You are in, everywhere

    The till, the back office, the menu and the rest all know you now. Tick Remember me on your own device so you are not asked again.

  4. 04

    Make the next time faster

    In your account, add a passkey to sign in with your face or fingerprint, or set a password. Both are optional, and codes keep working.

What our emails look like

Know a real Vesopa email when you see one

Every email we send comes from no-reply@vesopa.com and looks like these. A sign-in code is only ever typed in on auth.vesopa.com or inside a Vesopa app.

  • We never ask for your code or password by email, phone or text.
  • We never send a link that signs you in on its own.
  • If you get a code you did not ask for, ignore it. Nobody gets in without it.

FromVesopa <no-reply@vesopa.com>

SubjectYour Vesopa code: 482913

Vesopa

Use this code to sign in to your Vesopa account.

482913

This code expires in 10 minutes and can be used once.

If you did not ask for this, you can ignore this email. Nobody can get in without the code.

The sign-in code

FromVesopa <no-reply@vesopa.com>

SubjectVesopa security: Your password was changed

Vesopa

Your password was changed

Every other device has been signed out.

When
3 Oct 2026, 09:41
Device
Safari on iPhone

If this was you, there is nothing to do. If it was not, change your password and remove the device in your account.

A security notice, sent whenever something changes

Products

Sign in once, and you are in everywhere

Vesopa products share one identity. A manager who works the till and the back office has one account, not three, and the roles decide what each one lets them do.

Till

Vesopa EPOS

The till, with roles for operators, managers and owners.

Kitchen + display

Kitchen and customer screens

The kitchen screen and the customer display, signed in to the same venue as the till.

Kiosk

Vesopa Express

The self-service kiosk your customers order from.

Table ordering

Vesopa Menu

The QR menu. A code to a phone or an email address, and they are in.

Loyalty

Vesopa Loyalty

The loyalty card in the app, with points and rewards that follow the customer.

Gift cards

Vesopa Gift

Gift cards bought online and spent at the till.

Back office

Back office

Products, prices, staff and reports, with the permissions that decide who may change what.

Hosting

Vesopa Cloud

The hosting control panel, for customers running their sites and mail with Vesopa.

Signing in

Eight ways in, one account behind them

However somebody chooses to sign in, they arrive at the same account. Add a second way whenever you like — and take one away without losing anything.

  • Email and a codeSix digits, ten minutes, one use.
  • Phone and a codeTexted to UK mobiles.
  • Email and a passwordOptional, and never required.
  • PasskeyFace, fingerprint or device PIN.
  • GoogleVerified addresses only.
  • ApplePrivate relay addresses supported.
  • MicrosoftPersonal and work accounts.
  • GitHubConfirmed addresses only.

Developers

Standards, not a bespoke API

OpenID Connect and OAuth 2.1. Point any certified library at the issuer URL and it configures itself — there is nothing of ours for you to learn.

  • Authorisation code with PKCE, and refresh tokens that rotate
  • RS256 tokens, verifiable against our published JWKS
  • Discovery, userinfo, introspection, revocation and logout
  • Roles in the token, scoped to your application alone
Read the documentation
Discovery
curl https://auth.vesopa.com/.well-known/openid-configuration
Exchange a code for tokens
curl -X POST https://auth.vesopa.com/oauth/token \
  -d grant_type=authorization_code \
  -d code="$CODE" \
  -d code_verifier="$VERIFIER" \
  -d client_id="$CLIENT_ID" \
  -d redirect_uri="$REDIRECT_URI"

Your data

Your account is yours

Everything below is in your account settings, and none of it needs an email to support.

See every sign-in

Successful and failed, with the time, the address it came from and the device. Kept 13 months, then deleted.

Manage your devices

See what is signed in, and sign anything out. Remembering a device skips the second step — never the first.

Disconnect any app

See what each application can read, and cut it off. Access ends immediately.

Delete your account

Yourself, at any time. Your email address and phone number are freed straight away.

Sign in to your account

Made by Vesopa Software

The software behind the account

Tills, kiosks, kitchen screens, loyalty and the websites that go with them, built and supported in Wales.

Visit vesopasoftware.com