Skip to main content
Step-up authentication and device registration are required for all headless integrations. Without these, users will be blocked during login or sensitive actions. See the 2026_04_01 upgrade guide.
Implement the screens below based on which authentication methods you’ve enabled in your dashboard. Email is enabled by default for most projects.

​
Screens

Authentication methodDescriptionGuide
EmailCollect email, send OTP, verify codeGuide
SMSCollect phone number, send OTP, verify codeGuide
SocialTrigger OAuth redirect per providerGuide
PasskeyAuthenticate with a registered passkeyGuide
External WalletsConnect and verify an external walletGuide
MFAPrompt for TOTP code or passkeyGuide
CaptchaRender and submit captcha challengeGuide
Step-up authenticationRe-verify identity before sensitive actionsGuide
Device registrationVerify identity on unrecognized device loginGuide