Let users sign in to your app with their email and password. This is Create’s default authentication method and requires no external setup.

Before You Start

Make sure you have:

A Create project with User Accounts turned on

Overview

Enable User Accounts

Prompt Create to add users, or turn on from logo menu > Settings > User Accounts

Enable Email/Password

By default, email/password is enabled. You can turn it off and prompt Create to remove it.

Add to your sign in pages

Make the login form look how you want

Test flow

Make sure login works

Turn on / off

1

Access Project Settings

  1. Click the 3-dot menu at the top of the chat
  2. Select “Project Settings”
2

Enable Email/Password Sign In

  1. Navigate to the Authentication section
  2. Find Email/Password Sign In toggle
  3. Make sure it’s turned on (or off if you want to remove it)
  4. Tap “Save”
3

Add Sign In UI

  1. Return to the chat
  2. Prompt Create with “Add email/password sign in” or “Remove email/password sign in”
  3. Create will update your sign-in pages automatically
4

Publish Your App

  1. Click the Publish button
  2. Review your changes
  3. Publish to make the feature live

How It Works

When users sign up with email/password:

  1. The password is securely hashed using bcrypt before storage

  2. The email and hashed password are stored in your database:

    • Email in auth_users.email
    • Hashed password in auth_accounts.password
    • Account type set to “credentials”
  3. On sign in, Create:

    • Hashes the provided password
    • Compares it to the stored hash
    • Creates a secure session if they match

Customizing the Form

You can customize the email/password form through chat:

Make the sign in form match our brand colors
Add password requirements text under the password field

Create will update the form while maintaining the secure authentication logic.

Testing

  1. Publish your changes
  2. Open your app in a new incognito window
  3. Go to the sign in page
  4. Try signing up with email/password
  5. Check the auth_users table to see your new user

Troubleshooting

FAQ

See Also