What it does
Quickie gives you several ways to sign in, so you can pick whatever is easiest and most secure for you:
- Magic link — we email you a one-click link, no password to remember.
- Email & password — a classic password sign-in, with a "Forgot password?" recovery flow.
- Social login — one tap with Google, Microsoft or Apple (whichever your business has set up).
- Passkey — sign in with Touch ID, Face ID, Windows Hello or a security key — nothing to type.
From Settings → Account & security you can change your email, set or change your password, add/remove passkeys, and connect or disconnect social accounts.
Where to find it
- Sign in:
/auth/sign-in(you're sent here whenever you're signed out). - Forgot password: "Forgot password?" on the sign-in form →
/auth/forgot-password. - Reset password: the link in the reset email →
/auth/reset-password. - Account & security: Header → avatar menu → Settings → the Account & security card (
/dashboard/settings).
Step by step
Sign in with a password
- Go to the sign-in page and keep the Password tab selected.
- Enter your Email and Password.
- Click Sign in. You'll land on your dashboard.
Sign in with a magic link
- On the sign-in page choose the Magic link tab.
- Enter your email, then Email me a magic link.
- Open the email and click the link (it expires in 15 minutes and works once).
Sign in with Google / Microsoft / Apple
- Click Continue with Google (or Microsoft/Apple) on the sign-in page.
- Approve in the provider's window. You'll be returned to Quickie, signed in.
- If you cancel or it fails, you'll come back to the sign-in page with a short message — just try again.
Sign in with a passkey
- Click Sign in with a passkey.
- Approve with your device (fingerprint, face or security key).
- If your browser doesn't support passkeys, the button won't appear — use another method.
Create an account
- On the sign-in page click Create an account.
- Enter your name, email and a password (8+ characters, with a letter and a number), then Create account.
- Check your inbox and click the verification link before signing in.
Joining during the private beta
If Quickie is running in private beta, the sign-in page shows a "Private beta" notice and creating a new account needs an access code:
- Click Create an account — a Beta access code field appears.
- Paste the code your invite gave you, fill in the rest of the form, and continue.
- Already have an account? You're not affected — signing in (by password,
magic link, social or passkey) works exactly as normal, with no code needed. The code is only required the very first time an account is created.
Reset a forgotten password
- Click Forgot password? on the sign-in form.
- Enter your email and Send reset link. You'll always see the same confirmation (we never reveal whether an email is registered).
- Open the email, click the link, choose a new password and Update password. The link expires in 1 hour and works once.
Change your email
- Settings → Account & security → Email address.
- Type the new email and Change email.
- If your current email is verified, it's a two-step confirmation (this protects you if someone ever got into your account):
- We email your current address a confirmation link — click it to approve.
- We then email the new address a verification link — click that to finish the switch.
Until both are clicked, your email stays the same.
- If your current email isn't verified yet, the change applies immediately.
Set a password (for passwordless accounts)
If you only ever signed in by magic link, social or passkey, you'll see Set a password:
- Settings → Account & security → Set a password.
- Enter and confirm a strong password, then Set password. You can now also sign in with email + password.
Change your password
- Settings → Account & security → Change password.
- Enter your current password, then your new password twice, and Change password.
- Other devices are signed out for safety.
Add or remove a passkey
- Settings → Account & security → Passkeys.
- Optionally name it (e.g. "MacBook Touch ID"), then Add a passkey and approve with your device.
- Remove one with the trash icon next to it.
Connect or disconnect a social account
- Settings → Account & security → Connected accounts.
- Connect to link Google/Microsoft/Apple, or Disconnect to unlink. (You can't disconnect your only remaining way to sign in.)
What each screen shows
- Sign-in card — Password/Magic-link tabs, email + password, "Forgot password?", social buttons, the passkey button, and a "Create an account" toggle. Only the social providers your business configured are shown.
- Account & security card — your current email and whether it's verified; set/change password; your registered passkeys; and your connected social accounts.
Tips & good to know
- Forgot password also works if you've never set one. If you only ever used a magic link or social/passkey, requesting a reset still emails you a link — completing it simply creates a password on your account (your inbox is the proof of identity). So "Forgot password?" is also a way to add a password without signing in first.
- Passwordless is fine. You never have to set a password — magic link, social and passkeys all work on their own.
- Passkeys are the most secure and the fastest on a phone.
- Verification emails in development print to the server log instead of being sent (when
EMAIL_PROVIDERisconsole).
Troubleshooting
- "This reset link is invalid or has expired." Links last 1 hour and work once — request a new one.
- A social button is missing. That provider isn't configured for your deployment (see the admin notes below).
- No passkey button. Your browser/device doesn't support passkeys — use a password or magic link.
- Can't disconnect a social account. It's your only sign-in method — set a password or add another method first.
- "Quickie is in private beta. A valid beta access code is required to create an account." New sign-ups are gated right now — enter the access code from your invite in the Beta access code field. If you already have an account, just sign in instead (no code needed). Ask your administrator if you don't have a code.
For administrators (setup)
- Environment variables live in
.env.local(see.env.example). Key ones:BETTER_AUTH_SECRET,BETTER_AUTH_URL, the email provider settings, and the OAuth*_CLIENT_ID/*_CLIENT_SECRETpairs. - Social providers are env-gated: a provider only appears when both its id and secret are set. Add the redirect URI
<BETTER_AUTH_URL>/api/auth/callback/<provider>in the provider's console. - Passkeys derive their domain (RP ID) and origin from
BETTER_AUTH_URL. Locally that'slocalhost; in production set it to your real, stable domain — passkeys are bound to it. - Private-beta gate (optional, OFF by default). Set
BETA_GATE_ENABLED=trueandBETA_ACCESS_CODES=code1,code2(server-side only — neverNEXT_PUBLIC) to require a valid access code for new account creation. Existing accounts are unaffected (sign-in never creates a row). LeaveBETA_GATE_ENABLEDunset/falsefor open sign-up. Codes are checked constant-time byPOST /api/beta/verify, which sets a short-lived httpOnly proof cookie that the account-creation hook inauth.tsrequires.