Overview
ARI is a personal workspace. Authentication ensures only you can access your instance.
Password Protection
ARI includes a built-in password gate that locks your entire instance behind a login screen. When enabled, visitors must enter the correct password before accessing any page.
A secure HTTP-only cookie is set after successful login, valid for 24 hours.
Better Auth
For more advanced authentication, ARI uses Better Auth, which supports:
- Email and password login
- Magic link (passwordless) login
- OAuth providers (Google, GitHub, etc.)
Security Recommendations
- Use a strong, unique password
- Enable HTTPS on your deployment (automatic on Vercel)
- Review active sessions periodically
- Consider using OAuth providers for additional security