Separate web pages for sign in/sign up

[gary-host-laptop]

I think this is just a better way of handling things, at first I thought maybe I could only sign up if I had an invite or something since it only said sign in, plus adding a password is probably a very good idea.

[kimberli]

Great feedback. I've updated the copy on the login page to make this clearer.

I'm not currently planning to support password-based authentication. Curio is using Supabase Auth so it shouldn't be difficult to add, but storing user passwords in the database adds an additional attack surface and extra security overhead. Users have access to their accounts if they have access to their email accounts, which would still be true in the case of password auth.

[gary-host-laptop]

Could there be another way to log in without a password? Maybe 2FA? I don't have my e-mail always open on my PC so every time I log in I have to send me the link from my phone.

[kimberli]

Yes, I can support sending a one-time passcode (OTP) over email. Let me reopen this ticket to track.

Thanks for the suggestion!