How to choose login methods (email and password, magic links)

In TeleportHQ, you choose how visitors sign in to your web app in the authentication settings: click the padlock button at the top left of the canvas, then Manage Settings & Users, then the Settings tab. There you turn Email & Password Authentication on or off and enable sign-in providers such as Google or GitHub. The same switches are in the left sidebar, under Plugins → Authentication. Magic Links (passwordless email login) are marked Coming Soon and can't be used yet.

Before you start#

• Authentication must be turned on in your project. See How to add sign-up and login to your site.
• Every change here reaches your live site the next time you publish.

Steps#

Open the sign-in settings#

1. In the TeleportHQ editor, click the padlock button at the top left of the canvas. Once authentication is on, it shows Logged Out or the name of the user you're previewing as.
2. Under "Update your project authentication settings or disable authentication entirely.", click Manage Settings & Users.
3. The window opens on its Users tab. Click the Settings tab.

The TeleportHQ authentication Settings tab has, from top to bottom:

1. Email & Password Authentication, with its switch.
2. OAuth Providers: every sign-in provider you can add, with Search providers... at the top. Scroll down for Magic Links and Disable Authentication.

You can also reach these settings from the Plugins panel:

1. In the left sidebar, click Plugins (the four-squares icon above Growth).
2. Click the Authentication row. It shows On. Its settings open in a drawer beside the list.

The TeleportHQ Authentication drawer in Plugins shows:

1. Authentication enabled: the switch that turns the whole feature on or off. Below it, Start tutorial plays a short tour.
2. Email and password sign-in: the same switch as in the Settings tab.
3. Authentication settings ("Google, GitHub and the other sign-in providers, and how visitors sign in."): Open settings opens the authentication window on its Settings tab.
4. Users of your site: Manage users opens the same window on its Users tab, where you add, edit or remove accounts and set their roles.

Turn email and password sign-in on or off#

1. In the Settings tab, use the switch next to Email & Password Authentication. Or, in Plugins → Authentication, use Email and password sign-in: "Visitors can create an account with an email address and a password. Turn it off to sign in only through the providers you connect."
2. Publish your site for the change to reach your visitors.

Before you turn email and password sign-in off, enable at least one sign-in provider, so visitors still have a way to sign in. TeleportHQ notes: "Email and password authentication is a traditional method. We recommend using OAuth providers for better security and user experience."

Add a sign-in provider (Google, GitHub and others)#

1. In the Settings tab, under OAuth Providers, type a name in Search providers..., for example Google.
2. On the provider's card, click Enable.
3. Fill in the credentials and click Enable at the bottom.

For the full setup, see How to add "Sign in with Google" and other providers.

Check that it worked#

• Enabled providers show Configured on their card, and their button reads Manage.
• After you publish, your sign-in and sign-up pages offer the methods you turned on.

Turn off authentication completely#

Turning off authentication in TeleportHQ stops everyone from signing in or signing up on your site. You can do it in two places.

In the Settings tab:

1. Scroll to Disable Authentication at the bottom.
2. Read the warning.
3. Type disable authentication in the confirmation field.
4. Click Disable Authentication. A message says "Authentication has been disabled for this project".

In Plugins:

1. In the left sidebar, click Plugins, then the Authentication row.
2. Under Feature, click the Authentication enabled switch.
3. The Disable Authentication window says "This removes the sign-in and sign-up pages, unprotects every page, folder and component, and signs the preview out. User accounts stay in your data source." and asks "This cannot be undone. Are you sure you want to disable it?"
4. Click Disable Authentication.

Then publish your site for the change to take effect.

Troubleshooting#

I can't find Magic Links Scroll down the Settings tab. The Magic Links section shows a Magic Link Authentication card marked Coming Soon. Passwordless email login isn't available in TeleportHQ yet. Use email and password, or a sign-in provider such as Google.

My change doesn't show on the live site Authentication settings apply to your live site after you publish again.

My sign-in providers are gone after I turned authentication back on Turning authentication off also switches off its sign-in providers, even though the warning says they're kept. Their keys stay saved in your project's Secrets. Open each provider again, pick the saved keys, and click Enable. See How to keep passwords and API keys safe (Secrets).