Account and Security

Fudie uses modern, passwordless authentication to keep your account secure. Here's how it works.

Sign-In Methods

Google Sign-In

Click "Sign in with Google" and authorize with your Google account. This is the fastest way to sign in and doesn't require remembering any passwords. Your Fudie account is linked to your Google email address.

Magic Link

Enter your email address and we'll send you a secure one-time login link. Click the link in your inbox to sign in instantly. Magic links:

• Expire after 1 hour
• Can only be used once
• Are sent to the email address you entered

If you don't see the email, check your spam folder.

Session Management

• Your login session lasts 7 days
• After 7 days, you'll be prompted to sign in again
• Sessions are automatically invalidated if the JWT token expires
• You can manually sign out from Settings

Security Features

No Passwords

Fudie doesn't store passwords. Authentication is handled through Google OAuth or one-time magic links, eliminating the risk of password breaches.

CSRF Protection

All authenticated requests are protected against Cross-Site Request Forgery attacks using unique tokens that are validated with every request.

Rate Limiting

Sensitive endpoints (like login and magic link requests) are rate-limited to prevent brute-force attacks. If you make too many requests in a short time, you'll need to wait before trying again.

Encrypted Connections

All data transmitted between your browser and Fudie servers uses TLS encryption (HTTPS).

Secure Payment Processing

Payment information is handled entirely by Stripe — Fudie never sees or stores your credit card details.

Tips for Account Security

• Use Google Sign-In if possible — it provides the strongest authentication with Google's own security measures
• Don't share magic link emails — each link is a one-time login to your account
• Sign out on shared devices — your session persists for 7 days otherwise
• Use a unique email for your Fudie account