> Source: https://laravilt.com/docs/auth/introduction

# Auth Introduction

The Auth package provides a complete, modular authentication system for Laravilt panels.

## Overview

Laravilt Auth supports 8 authentication methods:

1. **Email/Password** - Traditional login with email and password
2. **Phone OTP** - One-time password via SMS
3. **Social Authentication** - OAuth with Google, GitHub, Facebook, etc.
4. **Passwordless** - Magic links via email
5. **Passkeys (WebAuthn)** - Biometric authentication
6. **Two-Factor Authentication** - TOTP, Email OTP, SMS OTP
7. **Recovery Codes** - Backup codes for 2FA
8. **API Tokens** - Personal access tokens via Sanctum

## Features

### Security Features

- **Password Encryption** - Bcrypt hashing
- **Encrypted Secrets** - 2FA secrets encrypted at rest
- **Hashed Recovery Codes** - Individual bcrypt hashing
- **Session Management** - View and revoke active sessions
- **Device Tracking** - IP address and user agent logging
- **Rate Limiting** - Configurable attempt limits

### Profile Management

- Update profile information
- Change password
- Manage two-factor authentication
- View/revoke active sessions
- Manage API tokens
- Register/delete passkeys
- Connect/disconnect social accounts
- Delete account

## Dependencies

| Package | Purpose |
|---------|---------|
| **Laravel Fortify** | Authentication scaffolding |
| **Laravel Socialite** | OAuth authentication |
| **Laravel Sanctum** | API tokens |
| **Laragear WebAuthn** | Passkeys/WebAuthn |
| **pragmarx/google2fa** | TOTP implementation |
| **bacon/bacon-qr-code** | QR code generation |

## Related

- [Configuration](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/configuration) - Configure auth settings
- [User Model](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/user-model) - Setup user model
- [Migrations](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/migrations) - Database migrations
- [Routes](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/routes) - Generated routes
- [Events](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/events) - Auth events
- [Profile Management](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/profile/introduction) - User profile features

## Authentication Methods

- [Email & Password](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/methods/email-password) - Traditional login
- [Social Authentication](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/methods/social-auth) - OAuth providers
- [Two-Factor Authentication](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/methods/two-factor) - TOTP, SMS, Email OTP
- [Passkeys](https://github.com/laravilt/laravilt/blob/HEAD/docs/auth/methods/passkeys) - WebAuthn biometric authentication