Account
A free cloud authentication service for your website or web app
Connect it to your site and get a complete sign-in flow out of the box: registration, sign-in, email verification and terms-of-service acceptance. We built Account on our own OIDC Server - a live product that shows what the library can do.
What's included
Modern sign-in methods
Passkeys (Face ID, fingerprint, hardware keys), password auth with brute-force protection and CAPTCHA, email and Telegram codes, TOTP (Google Authenticator, Authy) and recovery codes.
Multi-factor authentication chains
Build sign-in chains and assign a second step - e.g. password + email code. The preferred method is configured separately.
External identity providers
Google, Apple, Microsoft, Facebook, VK and Yandex out of the box. Need a provider that isn't listed - we'll add it.
Account & session management
Users see every active session with device, browser, IP and location, end a suspicious one or close all but the current, and manage linked external accounts.
Privacy & data control
Email and password changes, personal-data export (GDPR/CCPA) and account deletion - all self-service.
Secure by default
Cloudflare DDoS mitigation, password and email enumeration prevention, and security notifications on sign-in from a new device or location.
Sign-in methods
External providers
Flexible interface
Getting connected
To connect Account you need just four things:
Quorvel Coffee demo
Want to see how Account looks on a real site? Quorvel is a demo coffee shop with Account already connected. Sign up, sign in, open your profile and set up your sign-in methods.