---
source_url: "https://www.turbostarter.dev/docs/web/auth/overview?utm_source=openai"
title: "Overview - Authentication - Web | TurboStarter"
mirrored_at: 2026-08-18T15:02:30.463Z
host: www.turbostarter.dev
cited_in_42a: true
mirror_canonical: "https://index.42a.ai/www.turbostarter.dev/docs/web/auth/overview__q__utm_source_openai"
---

> **Original source:** https://www.turbostarter.dev/docs/web/auth/overview?utm_source=openai

> For the complete documentation index, see [llms.txt](https://www.turbostarter.dev/llms.txt). Prefer markdown by appending `.md` to documentation URLs or sending `Accept: text/markdown`.

Better Auth for email, OAuth, sessions, and organizations on the web app. Secure authentication wired to your database and UI.

TurboStarter uses [Better Auth](https://better-auth.com/) to handle authentication. It's a secure, production-ready authentication solution that integrates seamlessly with many frameworks and provides enterprise-grade security out of the box.

Why Better Auth?

One of the core principles of TurboStarter is to do things **as simple as possible**, and to make everything **as performant as possible**.

Better Auth provides an excellent developer experience with minimal configuration while keeping enterprise-grade security. Its framework-agnostic approach and focus on performance make it the perfect choice for TurboStarter.

Recently, Better Auth [announced](https://better-auth.com/blog/authjs-joins-better-auth) an incorporation of [Auth.js (28k+ stars on GitHub)](https://authjs.dev/), making it even more powerful and flexible.

![Better Auth](https://www.turbostarter.dev/_next/image?url=%2Fimages%2Fdocs%2Fbetter-auth.png&w=3840&q=75&dpl=dpl_2LH5rdYrWYkuSC1Hfiho4VQdfKAo)

You can read more about Better Auth in the [official documentation](https://better-auth.com/docs).

TurboStarter supports multiple authentication methods:

-   **Password** - the traditional email/password method
-   **Magic Link** - magic links
-   **OTP** - one-time passwords with automatic expiration
-   **Passkey** - passkeys ([WebAuthn](https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API))
-   **Anonymous** - allowing users to proceed anonymously
-   **OAuth** - social providers ([Apple](https://better-auth.com/docs/authentication/apple), [Google](https://better-auth.com/docs/authentication/google), and [GitHub](https://better-auth.com/docs/authentication/github) preconfigured)
-   [Google One Tap](https://developers.google.com/identity/gsi/web/guides) - native, one-click prompt for Google authentication

As well as common applications flows, with ready-to-use views and components:

-   **Sign in** - sign in with email/password, magic link, one-time password, or OAuth providers
-   **Sign up** - sign up with email/password or OAuth providers
-   **Sign out** - end session by signing out
-   **2FA** - two-factor authentication with TOTP, OTP, or recovery codes
-   **Password recovery** - forgot and reset password
-   **Email verification** - verify email address

You can **build your auth flow like LEGO bricks** - plug in only the parts you need and customize them as you wish.

[

### Configuration

Toggle password, magic link, OTP, passkey, anonymous, and OAuth providers independently through the Better Auth server config and UI provider list.

](https://www.turbostarter.dev/docs/web/auth/configuration)[

### User flow

Follow the TurboStarter authentication flow from sign-up to session. How login, callbacks, and protected routes work in your web app.

](https://www.turbostarter.dev/docs/web/auth/flow)[

### OAuth

Configure OAuth sign-in for your web app. Provider credentials, redirect URLs, and session handling with Better Auth.

](https://www.turbostarter.dev/docs/web/auth/oauth)[

### Two-Factor Authentication (2FA)

Add two-factor authentication with TOTP and backup codes via Better Auth. Secure enrollment, verification, and recovery flows for your web app.

](https://www.turbostarter.dev/docs/web/auth/2fa)

How is this guide?

Last updated on