# Add sign-in for your app's users

Let people sign up and log in to your app with an email code or a password. Then see who's joined in Users & Auth, and sign people out or remove them when you need to.

Sign-in comes with your app's database, so once you've added one, the people who use your app can sign up and log in. WebDIY builds the sign-in page into your app, and **Users & Auth** shows you who's signed up.

Your app's users are the people who use the app you've built. They aren't members of your organization, and they can't open your WebDIY projects. You'll find your own teammates on the **Team** page.

## Before you start

- You'll need a database. If your project doesn't have one yet, see [Add a database](https://web.diy/docs/database/overview#add-a-database). Adding it sets up sign-in at the same time.
- To sign people out or remove them, you'll need Admin access to the project. Anyone on the project can see the list of users.

## Add sign-in to your app

1. Ask WebDIY for it in the chat, and say who should see what. Something like:

   > Let people sign up and log in with their email. Only signed-in people can see and cancel their own bookings.
2. Once WebDIY has built it, open the sign-in page in the **Preview** and sign up with your own email address.
3. Check your email for a 6-digit code and enter it.

> **What you should see:** Your new account shows up in **Tools**, then **Users & Auth**.

What each person can see is decided in your app's code and its database rules, and WebDIY writes both. So you'll want to say plainly in the chat who may see and change what.

## How do people sign in?

| Way to sign in     | What people do                                                         |
| ------------------ | ---------------------------------------------------------------------- |
| Email code         | Type their email and get a 6-digit code. No password to remember.      |
| Email and password | Choose a password, and confirm their email with a code the first time. |

To check which of these your app offers, open **Users & Auth**, then **Sign-in settings**. The sign-in page is part of your app, so if you'd like to change it, ask WebDIY.

Sign-in emails come from a shared sender, `auth@mail.myneon.app`. It only sends 6-digit codes, not sign-in links, and there's a limit on how many emails it can send.

## See who's signed up

Open **Tools**, then select **Users & Auth** under Data. On the **Users** tab you'll find:

- **Accounts**, **New in 30 days** and **With an active session** at the top.
- A list of people, with when they joined and when their current session started. You can search it by name, or choose **Not confirmed** under **Show** to see who hasn't confirmed their email yet.
- Email addresses, masked until you select **Show emails**. Each time you show them, it's recorded in the project's audit log.

Select a person to see when they joined, their email, their user ID (**Copy user ID**) and which of your tables point to them.

## Sign someone out

1. Select the person, then open **More**.
2. Select **Sign out everywhere**, then confirm.

> **What you should see:** Within 15 minutes they're signed out of your app on every device. Their account and their data stay put, and they can sign back in with an email code.

## Remove an account

1. Select the person, then open **More**.
2. Select **Remove account…**, then **Remove account**.

> **What you should see:** They can no longer sign in to your app. Any rows in your tables that point to them are kept.

## Where to go next

- [Your app's database](https://web.diy/docs/database/overview)
- [Keys & secrets](https://web.diy/docs/database/keys-and-secrets)
- [Publish your app](https://web.diy/docs/publish/publish-your-app)