Logging in doesn't prove you're you — it proves you hold something

What an app actually checks when you log in, and the session it starts the moment you pass. Tap through a real login.

Aliteq

Syntax · Build Editor

You now understand

Login (authentication) proves you hold a credential, not that you're a specific human

You now understand

The app checks the credential against the account, then starts a session

You now understand

Because it's the credential that's checked, a stolen one logs a stranger in as you

What this means for your app

You almost never build login yourself; a provider like Supabase Auth handles it. Two things are still yours: turn on email confirmation so people can't sign up as an address they don't own, and…

Aliteq

Read the full story

Logging in doesn't prove you're you — it proves you hold something

Read the full story on Aliteq