Security
Boottify is built with security-first principles. This section covers authentication, authorization, and security features.
Authentication Methods
- Email/Password — Standard credential-based login
- OAuth — Google and GitHub single sign-on
- 2FA/TOTP — Time-based one-time passwords
- WebAuthn — Biometric and hardware key authentication
Session Management
Sessions use Lucia Auth v3 with 15-minute idle timeout, automatic warnings, and device tracking.
Data Protection
- Environment variables encrypted with AES-256
- Passwords hashed with Argon2id
- All data in transit encrypted via TLS 1.3
- Database connections encrypted