Secure, modern authentication for PHP apps
Production-ready authentication with local login, social sign-in, verification workflows, and layered anti-abuse controls.
Secure password hashing
Bcrypt with strict password policy enforcement.
Social authentication
Google, Apple, and Facebook support built-in.
Email verification
Verification tokens and account confirmation workflow.
Rate limiting
Brute-force protection for login and registration.
Spam controls
Honeypot fields, disposable email blocking, and hCaptcha.
Password recovery
Secure reset tokens and expiration handling.