Authentication Overview
Our platform security and user identity services are built on top of Firebase Authentication. This provides a secure, industry-standard authentication flow, ensuring that user credentials and sessions are handled with the highest level of security.
Secure Identity Architecture
All user credentials, authentication handshakes, and active session tokens are processed securely. Your authenticated session is securely verified before protected resources are accessed, ensuring that your data remains isolated and protected without our servers ever seeing or storing your raw passwords.
Browser │ ▼ Authentication Service │ ├── Email & Password ├── Email Link ├── Google ├── GitHub ├── X └── Yahoo
Email & Password
Standard email registration and sign-in. Supports strong password validation, secure hashing, and credential updates.
Social Sign-In
One-click authentication using external identity providers such as Google, GitHub, X (Twitter), and Yahoo.
Passwordless Sign-In
Secure passwordless login via email magic links, allowing quick access without memorizing passwords.
Password Recovery
Self-service password recovery flow to safely reset forgotten passwords via email.
MFA (TOTP)
Enhance account security by configuring Time-based One-Time Password (TOTP) Multi-Factor Authentication via an authenticator app.
Account Control
Change passwords, verify security credentials, and trigger scheduled account deletion.
Scope and Constraints
Supported Features
- Cryptographically secure tokens validated by our backend.
- TOTP-based second-factor authentication for enhanced security.
Non-Supported Features
- Phone Authentication / SMS MFA: Phone number authentication and SMS-based MFA are currently not supported.
- Direct Password-less Auth: Sign-ins must either occur via email magic links, email/password combinations, or supported social login routes.