Skip to content

Office Hours Β· Session #33

Custom Login & Sign Up

Sign-in, drawn as a transit line: board signed out, change at OAuth, arrive in session β€” with a return line home if the journey goes sideways.

Held on
June 9, 2026
Host
Sam
Difficulty
Beginner
Attendance
70

Sam's last session of the week before flying to Amsterdam for the in-person Super Agents event. The headline: Custom Login is now live for 100% of users β€” quietly rolled out two weeks ago, with the existing-app activation flow shipping last Thursday. Sam walked through enabling it on new vs. existing apps, demoed two custom logins built in single prompts (a Matrix-style page and a clean Amsterdam booking site), and covered the safe revert path via version history. The session also broke the World Cup Vibe Sprint news live β€” pivoting from the usual Friday-to-Monday format to a longer Launchpad-based run with the biggest credit prizes to date (500/250/100). Long Q&A covered token generation, 2FA, biometrics, OAuth customisation, affiliate-keyed login pages, and cross-app data sharing.

The authentication lineCustom login Β· every published app’s /lo routeSigned outthe /lo pageOAuthGoogle Β· Facebook Β· MicrosoftSessioninside the appMatrix-style pagedemo Β· single promptAmsterdam booking sitedemo Β· single promptThe authentication lineReturn line Β· version historySigned outthe /lo pageOAuthGoogle Β· Facebook Β· MicrosoftSessioninside the appMatrix-style pagedemo Β· single promptAmsterdam booking sitedemo Β· single prompt
  • The sign-in journey
  • Revert path via version history

Line status

The rollout meter reads 100%

Quietly rolled out β€” the line is now open end to end.

Custom Login is live for 100% of users

New apps come bundled with it by default. Existing apps can be migrated via Dashboard β†’ Overview β†’ switch from "Public Login Required Deprecated" β†’ "Public No Login" β€” a modal pops to enable custom auth and adds login/register/forgot-password/reset pages.

Service bulletins

Posted on the departures board

8 of 10 announcements β€” the headline calls run on their own boards.

  1. Charles is hosting Thursday 11 June

    While Sam is in Amsterdam. He'll be showing off his "empire of super agents" β€” Sam called it more than an army, "past that," referencing Charles having built something extensive in the super agents space.

  2. Drake & Robert hosting Wednesday 10 June

    Open drop-in as usual.

  3. B2B Hours Friday with Jen Mitch

    Running a session on "AI Orchestra," breaking down how to orchestrate multiple AIs into a unified workflow.

  4. First Base44 community in-person event Thursday 11 June

    At the Tag offices in Amsterdam. Super Agents-focused, credit giveaways, pizza, beer.

  5. Plan Mode is coming to post-build chat soon

    Sam mentioned this is coming to the builder "quite soon." Will work like Discuss Mode that transitions into action mode the more you talk.

  6. Pet Vibe Sprint winners announced

    Posted to the announcements channel during the session.

  7. Visual Editor is getting reworked

    Sam hinted there's significant change coming to the visual editor / builder layer. Canvas was the first step. "Watch this space and be very excited."

  8. SSO is unlikely to leave Elite preview

    Sam thinks the "preview" word will get removed eventually but SSO will remain Elite+ tier, not opening up to lower plans.

Stops in detail

Station by station

10 teaching stops from the session, in running order.

  1. Stop 01

    What Custom Login is

    The ability to replace the standard white Base44 login screen with anything you want. The /lo route on every published app becomes fully customisable β€” design, copy, colours, layout, all yours. You can have OAuth icons (Google, Facebook, Microsoft), or do something fully custom like a Matrix-style landing or a username availability check that passes parameters into Google sign-up.

  2. Stop 02

    New Apps: It's Already On

    Every new app you build now comes bundled with custom login automatically. Often the builder picks a themed login design without you even asking (Sam's Amsterdam booking demo built a clean themed login without a single login-related word in the prompt). You don't need to prompt for it.

  3. Stop 03

    Existing Apps: The Migration Flow

    Interchange Β· existing apps

    1. Open your app, go to Dashboard β†’ Overview
    2. Current state will show "Public Login Required Deprecated" in the dropdown
    3. Switch to "Public No Login" in the dropdown
    4. A modal pops up: "We'll add a ready-made login, register, forgot password, and reset page ready for your app. You can customize their look in the editor. They're yours to edit just like any other page. The visibility changes stage for your next publish. So this isn't going to take effect until you publish."
    5. Confirm yes in the modal β€” it auto-pastes a setup prompt into your builder chat
    6. Then prompt: "redesign the login and sign-up to match our application's overall UI"
    7. Nothing changes live until you publish. The existing site keeps its current login until ship.
  4. Stop 04

    How to Roll Back Safely

    Return line Β· the safe way back

    If custom login goes sideways:

    1. Switch back to "Public Login Required Deprecated" in Overview (this won't fully undo)
    2. Then use Version History (icon next to Preview, under the three-dot menu) to revert to the version before the auth changes
    3. This rolls back the entire code and SDK to the pre-custom-login state β€” nothing is lost

    Important: prompting your way out of a custom-login mistake doesn't work. You must use version history.

    Pre-custom-login versioncode + SDK restoredCustom login gone sidewaysdon’t prompt your way outReturn line Β· Version History
    The revert beat: Version History rolls the whole app β€” code and SDK β€” back to the stop before the auth changes.
  5. Stop 05

    Why Some Users Don't See the Modal

    The Overview dropdown radio button was deployed before the modal that walks you through enabling custom login. If you switched away from "Deprecated" early, you might not have seen the modal. Workaround: switch back to Deprecated, then switch forward again β€” the modal will fire.

  6. Stop 06

    Previewing Before Publish

    The new login won't appear publicly until you press Publish. To test before going live: prompt the builder to add a logout button somewhere, then click it in the preview window β€” you'll get bounced to the new custom login. Make design changes, then publish when happy. (Or just clone the app first and experiment on the clone if you're in serious production.)

  7. Stop 07

    What You Can Do With Custom Login

    • Pass parameters through registration (e.g., username selection BEFORE OAuth, then carry the selected username through Google sign-up and back on callback)
    • Replace the page with anything β€” a snake game gating registration, hieroglyphics, totally branded artwork
    • Multi-language support (just prompt for it)
    • Build custom flows like affiliate-keyed login pages (e.g., /login/affiliate-key-xyz that pre-assigns roles via backend functions β€” requires careful pen-testing)
  8. Stop 08

    What Custom Login Won't Do

    • Generate tokens (no token generation, but you CAN pass parameters)
    • Native 2FA by default (but you can integrate any 2FA API)
    • OTP/verification email customisation (Sam expects this is coming but not yet)
    • Custom open-graph images per page (would require SSR β€” currently single OG image only)
    • Passwordless login isn't viable yet β€” Sam tried live, it breaks because you can't push to users without a reference point (email)
  9. Stop 09

    Customising the Google OAuth Screen

    If you don't want the "Sign in with Base44" branding on the Google consent screen: Dashboard β†’ Settings β†’ Authentication β†’ Google Authentication β†’ use a custom OAuth from Google Console (Builder Plus tier required). This has been configurable for ~6 months β€” it's NOT a custom login feature.

  10. Stop 10

    Connecting Two Base44 CRM Apps

    Dashboard β†’ API on both apps. Give each app's API credentials to the other. They can then talk to one another. Super easy, doesn't require any complex setup.

News flash Β· broke live on air

World Cup Vibe Sprint changes everything about how sprints run

Starting NOW (not Friday-to-Monday), running longer than usual, World Cup theme. Credits: 500 first / 250 second / 100 third β€” way more than the standard sprint. Submissions go through Launchpad (app.base44.com/launchpad) β€” submit your app, gets approved, lands on the Launchpad page for community upvotes. Sam is pushing for Launchpad to become the official sprint submission platform long-term.

The interchange

Questions at the interchange

37 questions answered live, kept in boarding order.

Showing 37 of 37 questions

Fare gate

Ride the full session

Push through the turnstile β€” the whole hour, exactly as it streamed.

Office Hours #33 β€” Custom Login & Sign UpYouTube Β· opens in a new tab

End of the line

Carry these home

  1. Custom Login has been live for 100% of users for ~2 weeks β€” most people didn't know. Activate on existing apps via Overview β†’ switch from "Deprecated" β†’ "Public No Login" β†’ confirm modal. New apps include it by default.

  2. The revert path is Version History, not prompting. If custom login goes wrong, switch back to Deprecated and use the Version History icon (next to Preview, under three-dot menu) to roll back code and SDK.

  3. Nothing changes until you publish β€” you can experiment with custom login designs and only ship when happy. Or clone the app for a safe sandbox.

  4. World Cup Vibe Sprint is the biggest yet. 500/250/100 credit prizes (vs. usual 100/50/25-ish), starts now (not Friday), runs longer than usual, submissions via Launchpad. Launchpad is becoming the official sprint platform long-term.

  5. Custom Login is the canvas β€” do anything. OAuth icons, snake game gate, hieroglyphics, multi-language, affiliate-keyed flows. Pass parameters through the auth flow before/after OAuth. Not limited to login forms.

  6. What custom login WON'T do (yet): generate tokens, native 2FA, customise OAuth verification emails, custom OG images per page, true passwordless. All workaroundable via API integration except passwordless.

  7. You don't need any setup before custom login β€” no API keys, no integrations. Just toggle OAuth providers in settings same as before.

  8. Charles is hosting Thursday β€” he's been building something Sam called "more than an army" of super agents. Watch the session for that.

Posted at the station

Every link and reference shared during the session.