Email Authentication
Email authentication is disabled by default. When enabled, users can register with an email address and password, verify their address via a link, and reset their password through email.
Enable email auth
Section titled “Enable email auth”EMAIL_AUTH_ENABLED=trueYou must also configure at least one email delivery method (SMTP or an email API provider) for verification and password reset emails to be sent.
Delivery options
Section titled “Delivery options”Configure a standard SMTP server:
SMTP_HOST=smtp.example.comSMTP_PORT=587 # default: 587SMTP_USER=user@example.comSMTP_PASS=your-passwordSMTP_FROM=noreply@example.comSMTP_PORT defaults to 587. Most providers use port 587 with STARTTLS or port 465 with TLS.
Use a transactional email API provider instead of SMTP:
EMAIL_PROVIDER=resend # resend | postmark | sendgridEMAIL_API_KEY=your-api-keySMTP_FROM=noreply@example.comSMTP_FROM is used as the sender address regardless of which delivery method you choose.
What email auth enables
Section titled “What email auth enables”- Registration: Users can create an account with name, email, and password (minimum 8 characters).
- Email verification: A verification link is sent on registration. Users cannot log in until their email is verified.
- Password reset: A reset link is sent to the user’s email address, valid for one hour.