Basics
Auth
Manage your app's users and sign-in methods: email, Google, Apple, phone, anonymous, invite-only mode, and custom auth emails.
The Auth section manages the end users of the app you are building (not your Startbase team). It has two tabs: Users, for the accounts themselves, and Sign-in settings, for how people sign in.
Users
The Users tab shows a 30-day signup chart and a paginated user table with sign-in methods, role, last sign-in, and status (Confirmed, Invited, Pending, or Banned). From here you can:
- Add a user directly, with an optional password and a "mark email as confirmed" toggle.
- Invite a user by email; the invitation is sent through your project's auth mailer.
- Edit a user's email or set a new password.
- Change a user's role between Member and Admin (stored in the user's app metadata for your app to check).
- Delete a user (confirmation required; cannot be undone).
Search covers the currently loaded page of users, not the whole database. Use "Search next page" to continue scanning.
Sign-in settings
Toggle and configure how users sign in to your app:
- Email and password (on by default).
- Google OAuth: paste your Google client ID and secret.
- Apple: Services ID and secret JWT.
- Phone (SMS): Twilio SID, token, and message service SID.
- Anonymous users: let people try the app before creating an account.
- Invite only: block new signups entirely while existing users keep access.
Saved provider secrets are never displayed again. Leaving a credential field empty when saving keeps the stored value, so you can update one field without re-entering the others.
The URLs panel sets your Site URL and the redirect URLs allowed after sign-in. The Custom emails panel links to the Emails section, where you can brand the confirmation, magic link, reset, invite, and email-change templates.