--- title: User flow description: Discover the authentication flow in Turbostarter. url: /docs/web/auth/flow --- # User flow TurboStarter ships with a fully functional authentication system. Most of the views and components are preconfigured and easily customizable to your needs. Here you will find a quick walkthrough of the authentication flow. ## Sign up The sign-up page is where users can create an account. They need to provide their email address and password. ![Sign up](/images/docs/web/auth/sign-up.png) Once successful, users are asked to confirm their email address. This is enabled by default - and due to security reasons, it's not possible to disable it. Make sure to configure the [email provider](/docs/web/emails/configuration) together with the [auth hooks](/docs/web/emails/sending#authentication-emails) to be able to send emails from your app. ![Confirm email](/images/docs/web/auth/confirm-email.png) ## Sign in The sign-in page is where users can log in to their account. They need to provide their email address and password, use magic link (if enabled) or third-party providers. ![Sign in](/images/docs/web/auth/sign-in.png) ## Sign out The sign out button is located in the user menu. ![Sign out](/images/docs/web/auth/sign-out.png) ## Forgot password The forgot password page is where users can reset their password. They need to provide their email address and follow the instructions in the email. ![Forgot password](/images/docs/web/auth/forgot-password.png) The reset password page is where users land from a forgot email. There they can reset their password by providing new password and confirming it. ![Reset password](/images/docs/web/auth/update-password.png) ## Two-factor authentication Two-factor authentication is a security feature that requires users to provide a code sent to their email or phone number in addition to their password when logging in. ![Two-factor authentication](/images/docs/web/auth/two-factor/sign-in-prompt.png)