---
title: "Email & Password Authentication"
description: "Secure email and password authentication with Argon2id password hashing and breach detection."
order: 1
category: "Authentication"
updated: "2026-10-13"
---

# Email & Password Authentication

AuthSetu provides zero-compromise email and password authentication out of the box, adhering strictly to RFC 9106 standards.

## Key Security Features

- **Argon2id Hashing**: Uses 64MB memory, 3 iterations, and 4 threads for superior resistance against GPU/ASIC cracking.
- **HaveIBeenPwned (HIBP) Checks**: Automatic k-anonymity validation prevents users from adopting known breached passwords.
- **Rate Limiting & Lockout**: Exponential backoff and account lockouts protect against credential stuffing attacks.
- **Magic Links & Password Resets**: Time-limited cryptographic single-use tokens sent via transactional email.

## Next.js Implementation

```tsx
import { SignIn } from '@authsetu/react';

export default function LoginPage() {
  return (
    <SignIn
      routing="path"
      path="/sign-in"
      signUpUrl="/sign-up"
      afterSignInUrl="/dashboard"
    />
  );
}
```