Everything behind the front door.
Built in, not bolted on.
Lintel handles sign-up, sign-in, second factors, sessions and organizations, so your team can spend its time on the product people came for.
The small things,
done properly.
Details nobody notices until they’re missing. Every one of them is on by default.
Passkeys first
Face ID, Touch ID and Windows Hello on every plan. Passwords stay available for people who prefer them.
Twenty-plus social providers
Google, GitHub, Apple, Microsoft, Slack and more. Development keys are built in, so there’s no OAuth app to set up.
Codes and magic links
One-time codes and links by email or SMS, rate limited and expiring on their own.
Forty languages
Every screen and every email is translated, with right-to-left layouts handled for you.
Sign-in that adapts to every user
One flow covers passwords, passkeys, email codes and social accounts. Lintel offers the right step for each person and remembers how they like to sign in.
Bot checks without puzzles
Remembers the last method used
Matches your fonts and colours
Fieldnote
Sign in to Fieldnote
Welcome back. Pick up where you left off.
GitHub
Apple
or
Email address
mira@fieldnote.co
Continue
No account?
Sign up
Secured by
Lintel
Two-step verification
Enter the code from your authenticator app.
4
8
1
9
2
6
New sign-in
now
Chrome on macOS · Lisbon, Portugal
It was me
Revoke session
Second factors people actually finish
Authenticator apps, SMS, backup codes and passkeys as a second step. Users get new-device alerts and can end a session straight from the email.
Authenticator apps, SMS and backup codes
New sign-in alerts
Require MFA per role
Ten lines of code. Really.
Install the SDK, add two keys and render a component. Sessions, token refresh and middleware come with it, in the framework you already use.
Next.js, React, Vue, Astro and Expo
Typed SDKs and signed webhooks
Works on localhost in minutes
38ms
median sign-in response time
99.99%
API uptime over the last twelve months
12B
breached passwords checked at every sign-up
40
languages, right-to-left included
And everything around it.
Already built.
The parts of auth that turn into quarter-long projects when you build them yourself.
Webhooks
Signed events for every sign-up, sign-in and profile change, with retries and a replay log.
Audit logs
Who did what and when, exportable to your SIEM or as a CSV.
Impersonation
Support staff can see exactly what a user sees, and every session is recorded.
Session token templates
Shape the token with the claims your backend expects, per environment.
Custom domains
Run sign-in on accounts.yourdomain.com with certificates handled for you.
Rate limits
Sensible limits on every endpoint, tuned per account and per network.
Bulk import
Bring users from Auth0, Firebase or your own tables with password hashes intact.
Data residency
Keep user data in the EU or the US, chosen per instance.
Admin dashboard
Search users, reset factors and lock accounts without writing a query.
Questions,
answered.
Something missing? Talk to the team and an engineer will get back to you within a working day.