Skip to content

Set up email sign-in

For self-hosted instances, email authentication is disabled by default. When enabled, users can register with an email address and password, verify their address via a link, and reset their password through email.

EMAIL_AUTH_ENABLED=true

Configure SMTP for verification and password reset emails:

SMTP_HOST=smtp.example.com
SMTP_PORT=587
SMTP_PASS=your-password

Production startup requires SMTP_HOST and SMTP_FROM when email authentication is enabled. Supply credentials if your SMTP server requires authentication. Use a provider’s STARTTLS endpoint, typically port 587; the current sender does not establish implicit TLS connections on port 465.

Self-hosted builds use SMTP for both authentication emails and comment notifications. EMAIL_PROVIDER and EMAIL_API_KEY are not supported in these builds.

  • Registration: Users can create an account with name, email, and password (minimum 8 characters).
  • Email verification: A verification link is sent on registration. Users cannot log in until their email is verified.
  • Password reset: A reset link is sent to the user’s email address, valid for one hour.