A familiar way in.
Email and password, verification, and recovery. A straightforward flow your users already know.
EMAIL AUTHENTICATION
AUTHENTICATION, SIMPLIFIED
Your next big idea.
Already signed in.
The authentication layer that stays out of your way. Bring your interface. Keep your stack. Connect with one clear API.
YOUR UI+OUR AUTH=BACK TO BUILDING
YOUR APPLICATIONAny stack. Your rules.
✓
01 / IDENTITY LAYERHTTPS
IDENTITY VERIFIEDLet the good ones in.
JSON API
SPEAKS YOUR LANGUAGE
JavaScriptPythonGoSwiftPHPAnything HTTP ↗
01 — THE PLATFORM
Small surface.
Solid foundations.
The essentials, connected.
From the first signup to the last
logout.
Every project, its own space.
Separate users, keys, and settings for every application. One quiet place to manage them all.
DEVELOPER WORKSPACEControl that stays with you.
See your users, revoke sessions, rotate keys, and disable access when you need to.
REVOCABLE BY DESIGN02 — THE CONNECTION
Your frontend.
Your backend.
Our one job.
No required SDK. No prescribed login screen. A project ID and the same HTTPS requests, wherever you build.
Explore the integration →
YOUR UI→YOUR SERVER→COMFYAUTH
authenticate.shHTTP / JSON
# One request. A verified identity.
curl /v1/auth/login \
-H "Content-Type: application/json" \
-H "X-Project-ID: $PROJECT_ID" \
-d '{
"email": "hello@example.com",
"password": "$USER_PASSWORD"
}'
200 OKVerified account → revocable session
Illustrative request. Keep session tokens on your application server.
03 — UNDER THE HOOD
Trust is built
in the details.
Clear boundaries. Established primitives.
Protection you can
understand.
Passwords are hashed.
Salted Argon2id password hashing. Raw passwords never go into the database.
Sessions can end. Immediately.
Random, opaque tokens stored as hashes. Server-side validation checks revocation.
Recovery links have limits.
Expiring, single-use tokens. Email payloads encrypted before they enter the queue.
EARLY RELEASE · Email is connected; verification and password resets tested in our Hostinger inbox. Google, Apple, phone login, and MFA are planned, not available yet.
LESS AUTH WORK. MORE YOUR WORK.