Password policies & MFA
Built-in setting
Zero-config
Minimum password strength, rotation rules, and multi-factor authentication (TOTP). Configured in Auth → Credentials. MFA enrollment UI is built into the platform, no code needed.
Where to enable it
Toggle this feature in your project editor. No code required.
Inside the editor, head to Auth → Credentials.
Open in my projectRelated features
Email & password login, magic links
Email + password and passwordless magic link login are built in. Configure signup rules (open/closed, email verification, domain allowlists) in Auth → Settings. No code required, the platform handles password hashing, verification emails, and rate limiting.
Session length & remember-me
Set how long users stay logged in and whether remember-me is enabled. Configured in Auth → Settings, enforced server-side by the platform.