Authentication

clarife supports multiple authentication methods to balance security and convenience.

The standard authentication method:

• Minimum 8 characters required
• Passwords are hashed using bcrypt (never stored in plain text)
• Password reset via email link
• Change password anytime in Settings

ℹ️ Info: clarife uses bcrypt with a high cost factor for password hashing, making brute-force attacks computationally impractical.

Passwordless authentication for quick access:

1. Enter your email - On the sign-in page, enter your email and choose Send magic link.
2. Check your inbox - A one-time link is sent to your email address.
3. Click the link - Click the link to sign in. No password needed. The link expires after 1 hour.

Sign in with one click using a third-party account:

ℹ️ Info: OAuth providers are for one-click sign-in. You choose your sign-in method when you create your account; the account is tied to the email address used at sign-up.

Add a second layer of security with TOTP (Time-based One-Time Password):

See Security Settings for setup instructions.

⚠️ Warning: When 2FA is enabled, you must enter a TOTP code on every sign-in. Keep your recovery codes in a safe place in case you lose access to your authenticator.

Yes. Email/password, magic link, and sign-in with Google, Apple, or GitHub are all available. Your account is tied to the email address used at sign-up.

Yes. Apple allows you to use a private relay email that forwards to your real address. clarife sees only the relay address unless you choose to share your real email.

Click Forgot password on the sign-in page. A password reset link is sent to your email. You can also use magic link or OAuth to sign in without a password.

2FA is applied to email/password and magic link sign-ins. OAuth providers manage their own 2FA independently. We recommend enabling 2FA on both your clarife account and your OAuth provider.