Let users sign in to your app with their email and password. This is Create’s default authentication method and requires no external setup.

​
Before You Start

Make sure you have:

A Create project with User Accounts turned on

​
Overview

Enable User Accounts

Prompt Create to add users, or turn on from logo menu > Settings > User Accounts

Enable Email/Password

By default, email/password is enabled. You can turn it off and prompt Create to remove it.

Add to your sign in pages

Make the login form look how you want

Test flow

Make sure login works

​
Turn on / off

1

Access Project Settings

  1. Click the 3-dot menu at the top of the chat
  2. Select “Project Settings”
2

Enable Email/Password Sign In

  1. Navigate to the Authentication section
  2. Find Email/Password Sign In toggle
  3. Make sure it’s turned on (or off if you want to remove it)
  4. Tap “Save”
3

Add Sign In UI

  1. Return to the chat
  2. Prompt Create with “Add email/password sign in” or “Remove email/password sign in”
  3. Create will update your sign-in pages automatically
4

Publish Your App

  1. Click the Publish button
  2. Review your changes
  3. Publish to make the feature live

​
How It Works

When users sign up with email/password:

  1. The password is securely hashed using bcrypt before storage

  2. The email and hashed password are stored in your database:

    • Email in auth_users.email
    • Hashed password in auth_accounts.password
    • Account type set to “credentials”

  3. On sign in, Create:

    • Hashes the provided password
    • Compares it to the stored hash
    • Creates a secure session if they match

​
Customizing the Form

You can customize the email/password form through chat:

Make the sign in form match our brand colors

Add password requirements text under the password field

Create will update the form while maintaining the secure authentication logic.

Note, your customizations here should styling related. If you need to collect additioanl fields from the user, do that later in the app after they sign up. Email/passowrd should be the only required fields in the sign up form.

​
Testing

  1. Publish your changes
  2. Open your app in a new incognito window
  3. Go to the sign in page
  4. Try signing up with email/password
  5. Check the auth_users table to see your new user

​
Troubleshooting

​
FAQ

​
See Also