Sign-in and OTP verification failures lock users out

Category: Bugs Priority: P0 Severity: critical Area: login-auth Reports: 7 Status: Open

Summary

Seven users could not sign in or register at all, making these full lockouts from the app. Failure modes vary: emailed verification codes are rejected as incorrect (one user sees the digits displayed reversed and rejected either way — likely an RTL/BiDi rendering bug in the OTP UI or email), a resent code never arrives, both Google and email sign-in fail during registration, one user could not sign back in after pressing sign out in Settings, and one was blocked by the new anti-spam rule against temp-email domains (passinbox.com) and had his account manually migrated by Abdellatif to a proton.me address. Several of the OTP reports come in as direct replies to the "Your Qaf Verification Code" email from system@qaf.ai (codes expire in 5 minutes), and users explicitly worry about losing account data and chat history. Four of the seven threads never got a reply.

What users say

J javer830lolz@proton.me

Could not sign in because signups from temporary-email domains (his account was amazon.surfboard369@passinbox.com) were blocked as anti-spam. Wanted his old account back because of his chat history. Abdellatif migrated the account to his proton.me email the same day and the user confirmed sign-in works.

Asalamu alaikum, I've been enjoying use Qaf for Islamic purposes and was unable to sign in. Akhi if I did anything wrong I apologize my only intention is to use Qaf to gain more knowledge and stream line my own studies.

Follow-up: "Will I be able to get my old account by signing in with this email account? My old account had my chats on there that I'd like to not lose and starting over would be time consuming."

Mohammed Al-Humaidi (محمد الحميدي) alhmydymhmd191@gmail.com

Reported he could not sign in to the app. After Abdellatif asked for device/OS/error details, the user said the login issue was resolved via Instagram support — but then reported a new problem: the app does not work at all despite a working internet connection. His device is a Tecno Pova 5 (Android).

تطبيق الذكاء الاصطناعي قاف فيه مشكلة بتسجيل الدخول

The Qaf AI app has a problem with signing in.

Follow-up: "مع ان عندي انترنت لكن التطبيق ما يعمل" — Even though I have internet, the app does not work. / "هاتفي هو [ تكنو بوفا 5 ]" — My phone is a [Tecno Pova 5].

Hammad bin Abdulrahman Al-Omar (حماد بن عبدالرحمن العمر) alomar322@gmail.com

Replied to the OTP email (system@qaf.ai): he pressed sign out in Settings and could not sign in again.

ضغطت على تسجيل الخروج في الإعدادات ولم أتمكن من الدخول مرة أخرى.

I pressed sign out in Settings and could not sign in again.

Shujaudin Yaqubi shujaudinyaqubi@gmail.com

Replied to the OTP email: he entered the emailed verification codes but the app says they are wrong; he cannot complete sign-in and asks where the problem is.

سلام اين كودها را ستفاده كردم ميگويد اشتباه است مشكل در كجا است

Salam, I used these codes and it says they are wrong. Where is the problem?

Abdulaziz Saleh abdulazizsb@gmail.com

Replied to the OTP email: tried to register, but the verification code appears with the digits reversed, and even when he flips the digits back the app rejects it. Tried multiple times and could not complete registration. (Note: he replied on 2026-08-17 to a code emailed 2026-08-15 — codes expire in 5 minutes, but the reversed-digits symptom points at an RTL digit-ordering bug in how the code is displayed/entered.)

لقد حاولت التسجيل واخذت الرقم او الرمز المرسل من عندكم جزاكم الله خير لكن يعطيني الارقام بالمقلوب وحتى اذا قلبت الارقام يرفض وحاولت اكثر من مره اساس التسجيل وما استطعت ارجو اصلاح المشكله

I tried to register and took the number/code you sent — may Allah reward you — but it gives me the digits reversed, and even if I flip the digits it rejects them. I tried registering more than once and could not. Please fix the problem.

MOONTASR Malik amnmg123@gmail.com

Cannot register: sign-in with Google does not work and neither does email. Asks how to sign in so his information is preserved.

تسجيل منgoogel لا يعمل ولا من الاميل اريني كيف الطريقه حتي احتفظ بالمعلومات

Signing in with Google doesn't work, nor with email. Show me how so I can keep my information.

Rashid Al-Maswari (راشد المسوري) almswryrashd@gmail.com

Replied to the OTP email: the resent verification code never arrived, leaving him unable to sign in.

لم يصلني الرمز الجديد

The new code did not reach me.

Details / repro

Threads