Authentication, done right.
A clean, secure and fully embeddable login system for PHP — registration, email verification, password reset, profiles and an admin panel. Drop it into any project.
Everything you need
Secure by default and easy to integrate.
Secure by design
Hashed passwords, CSRF protection, prepared statements and hardened sessions.
Registration & login
Clean sign-up and sign-in with validation and a "remember me" option.
Email verification
Confirm new accounts by email using the bundled PHPMailer integration.
Password reset
Token-based forgot-password and change-password flows out of the box.
User profiles
Editable profiles with avatar upload, headline and bio.
Admin panel
Add, verify, block, unblock and delete users from a dedicated area.
Brute-force protection
Failed logins are rate-limited and locked out automatically.
Login activity
Members see recent sign-ins and can revoke remembered devices.