Authentication

The laravilt/auth package gives every panel a complete authentication system. You turn features on with fluent methods on the panel, and the package registers the pages, routes, migrations and events for you.

Features include email and password login, registration, password reset, email verification, one-time codes (OTP), magic links, two-factor authentication (authenticator app or email code), passkeys (WebAuthn), social login, session management, API tokens (Sanctum), connected accounts and locale/timezone preferences.

php artisan laravilt:install asks which of these features you want and writes the matching methods into your panel provider (app/Providers/Laravilt/AdminPanelProvider.php):

Try it on the live demo (log in with [email protected] / password).

In this section

1. Configuration: panel methods, the config file and artisan commands
2. User Model: the LaraviltUser trait
3. Migrations: the tables and columns the package adds
4. Authentication Methods: email and password, social login, two-factor, passkeys
5. Profile & Settings: the built-in account pages
6. Routes: every route the package registers
7. Events: events you can listen to

Dependencies

These are installed automatically with laravilt/auth:

Package	Used for
laravel/fortify	Two-factor secrets and recovery codes
laravel/sanctum	API tokens
laravel/socialite (plus socialiteproviders/discord and socialiteproviders/atlassian)	Social login
laragear/webauthn	Passkeys
jenssegers/agent	Device details on the sessions page