Identity
Auth & registration
How people sign up, sign in, and get verified. Built progressive-by-default — value before registration.
Sign-in methods
Pick the providers you want to offer. Users can mix & match.
Email verification
Use Brevo (recommended) or Novasia's built-in mailer.
Require email verification
RecommendedBlock sensitive actions until the email is confirmed.
Send via Brevo
Better deliverability + branded templates. Connect in Integrations.
Phone verification
One-time SMS codes for high-trust accounts.
Require phone verification
Adds an SMS step during sign-up.
Send via Brevo SMS
Connect Brevo to deliver codes worldwide.
Progressive onboarding
Default rule: let people experience your app before forcing signup.
Allow guest exploration
RecommendedVisitors can browse and try features anonymously.
Require login before save
Prompt for an account when visitors save their first item.
Require login before publish
Anyone can draft, but publishing requires an account.
Require verification before collaboration
Invitees must verify email or phone before editing shared work.
Require verification for private data access
RecommendedBlock personal/private areas until verification is complete.
Multi-factor authentication
Step-up MFA for admins or high-security accounts.
Require MFA for admins
RecommendedOwners + Admin roles must enroll.
Allow MFA opt-in for all users
Members can enable MFA from their profile.
Require MFA for sensitive actions
Re-prompt before billing or destructive changes.
Allow recovery codes
One-time backup codes if a device is lost.
Admin: registration policy
Override the global default for this project.