Navigation
Email & Password Authentication
The primary method of registering and authenticating accounts on our platform is via secure email and password credentials, processed directly by our authentication service.
Account Registration
During registration, users provide a valid email address and a secure password. We enforce strict password complexity rules to ensure account integrity:
Complexity Rules:
- Must contain at least one lowercase letter.
- Must contain at least one uppercase letter.
- Must contain at least one numeric character.
- Must contain at least one special character (non-alphanumeric).
- Must meet the minimum length of 8 characters.
Upon registration, a verification link is automatically sent to your inbox to confirm ownership of the email address.
Credential Security & Hashing
Security is our top priority. We leverage modern cloud infrastructure to protect user credentials:
- No Raw Storage: Our servers never store, log, or intercept raw user passwords.
- Secure Hashing: Credentials are securely salted and hashed using industry-grade cryptographic algorithms by our authentication provider.
- Session Verification: Your authenticated session is securely verified before protected resources are accessed.
Authentication Walkthrough
- Client Submission: The client enters credentials in the login form, which are securely submitted to our authentication service.
- Token Retrieval: Upon authentication, a secure session token is returned to your browser.
- Backend Handshake: Your authenticated session is securely verified before protected resources are accessed.
- Verification: If your session expires or becomes invalid, you will be prompted to log in again.