Authentication

NuxtBase provides a complete authentication system powered by Better Auth with multiple sign-in methods and advanced security features.

Sign-In Methods

Social Login

Sign in with your existing accounts:

• Google — One-click OAuth login with your Google account
• GitHub — Authenticate using your GitHub credentials

Email & Password

Traditional email and password authentication with:

• Email verification on signup
• Password strength requirements
• Secure password reset flow via email

Passkeys

Passwordless authentication using WebAuthn:

• Use your device's biometric sensor (fingerprint, face recognition)
• Hardware security key support
• No password required — fast and secure

Magic Links

Email-based passwordless sign-in:

1. Enter your email address on the login page
2. Click "Magic Link" to receive a sign-in link
3. Click the link in your email to log in instantly

Two-Factor Authentication (2FA)

Add an extra layer of security to your account:

TOTP Authenticator

• Set up with any TOTP app (Google Authenticator, Authy, 1Password, etc.)
• Scan the QR code or enter the setup key manually
• Enter the 6-digit code on each login

Backup Codes

• Generated when you enable 2FA
• Use a backup code if you lose access to your authenticator app
• Each code can only be used once

Trusted Devices

• Mark a device as trusted to skip 2FA on future logins
• Manage trusted devices from your account settings

Password Reset

If you forget your password:

1. Click "Forgot Password" on the login page
2. Enter your email address
3. Check your inbox for the reset link
4. Set a new password

Session Management

• Sessions are managed server-side with secure HTTP-only cookies
• Automatic session expiry for inactive accounts
• All sessions can be reviewed and revoked from account settings