Portal access and profile

Sign in to the customer portal

The portal currently presents two sign-in methods, but only PPPoE credentials provide a complete production sign-in path:

• PPPoE username and password.
• phone number plus a verification code, whose SMS delivery is not implemented in this version.

Use PPPoE credentials

Enter the PPPoE username (maximum 191 characters) and password. This method is intended for a matching PPPoE subscriber account. If rejected, verify the exact credentials and account state through the operator profile; do not create a second subscriber as a shortcut.

Phone verification-code limitation

Caution

Do not direct subscribers to phone-code sign-in in production. The current screen can generate a code in the server session and write a development/testing log record, but it does not dispatch that code through an SMS provider.

The phone-code controls remain visible in the portal, but the flow is incomplete for subscribers who cannot inspect development records. Requesting a code is not currently rate-limited. Incorrect code verification attempts are rate-limited.

Until SMS dispatch is implemented and verified, subscribers without working PPPoE credentials need ISP support through an approved identity-verification and credential-recovery process. Operators must not retrieve a generated code from logs and disclose it as a production workaround.

Expired links

Payment/access links expire for security. The expired-link page directs the subscriber toward portal sign-in. In this version, use PPPoE credentials when available; otherwise contact the ISP instead of relying on the incomplete phone-code flow.

Update the profile

The phone number is displayed read-only in the current profile. The subscriber can update:

• first name (optional, maximum 60);
• last name (optional, maximum 60);
• email (optional, valid email, maximum 120);
• address (optional, maximum 300).

Phone changes require operator support so account identity and contact data can be protected. Before changing a phone, the operator should verify the subscriber using approved account evidence.

Sign out and shared devices

Sign out after using a shared device. Do not save PPPoE credentials in an untrusted browser. If access is suspected to be compromised, contact the ISP and change credentials through the supported process.