What is login, actually? How an app knows it's you

Lesson 1 of who are you: logging in doesn't prove you're you. It proves you hold something only you should have. What the app actually checks, and…

Aliteq
Sam Ortega · Build Editor

You now understand

Login (authentication) proves you hold a credential, not that you're a specific human

You now understand

The app checks the credential against the account, then starts a session

You now understand

Because it's the credential that's checked, a stolen one logs a stranger in as you

What this means for your app

You almost never build login yourself; a provider like Supabase Auth handles it. Two things are still yours: turn on email confirmation so people can't sign up as an address they don't own, and…

Aliteq

Read the full story

What is login, actually? How an app knows it's you

Read the full story on Aliteq