---
title: User flow
description: Discover the authentication flow in Turbostarter.
url: /docs/web/auth/flow
---

# User flow

TurboStarter ships with a fully functional authentication system. Most of the views and components are preconfigured and easily customizable to your needs.

Here you will find a quick walkthrough of the authentication flow.

## Sign up

The sign-up page is where users can create an account. They need to provide their email address and password.

![Sign up](/images/docs/web/auth/sign-up.png)

Once successful, users are asked to confirm their email address. This is enabled by default - and due to security reasons, it's not possible to disable it.

<Callout type="warn" title="Sending authentication emails">
  Make sure to configure the [email provider](/docs/web/emails/configuration) together with the [auth hooks](/docs/web/emails/sending#authentication-emails) to be able to send emails from your app.
</Callout>

![Confirm email](/images/docs/web/auth/confirm-email.png)

## Sign in

The sign-in page is where users can log in to their account. They need to provide their email address and password, use magic link (if enabled) or third-party providers.

![Sign in](/images/docs/web/auth/sign-in.png)

## Sign out

The sign out button is located in the user menu.

![Sign out](/images/docs/web/auth/sign-out.png)

## Forgot password

The forgot password page is where users can reset their password. They need to provide their email address and follow the instructions in the email.

![Forgot password](/images/docs/web/auth/forgot-password.png)

The reset password page is where users land from a forgot email. There they can reset their password by providing new password and confirming it.

![Reset password](/images/docs/web/auth/update-password.png)

## Two-factor authentication

Two-factor authentication is a security feature that requires users to provide a code sent to their email or phone number in addition to their password when logging in.

![Two-factor authentication](/images/docs/web/auth/two-factor/sign-in-prompt.png)
