Authentication Flows

Sign Up

• Minimum fields: Email and password (or just email for magic link)
• Social sign-in options above the form (Google, GitHub, Apple)
• Password requirements shown proactively, not after failed attempt
• Email verification via link, not code (less friction)

Log In

• Email + password as default
• "Remember me" checkbox
• "Forgot password?" link visible near password field
• Show/hide password toggle
• Rate limit failed attempts (show "try again in X seconds")