How to create local password sign-in users
Add BaseBuddy users to app data and verify password sign-in.
BaseBuddy sign-in is local to the app. Users are stored in app data with scrypt password hashes.
Email magic-link sign-in is not part of the current setup model. Use password users until another auth provider is explicitly added.
Create the first owner
The normal setup flow creates the first owner:
shpnpm basebuddy setup \
--owner-email "owner@example.com" \
--owner-name "Owner" \
--owner-password "choose-a-strong-password"Add another local user
From the BaseBuddy repo root:
shpnpm basebuddy user:create \
--email "editor@example.com" \
--name "Editor" \
--password "choose-a-strong-password"Then add the user to a project from the BaseBuddy member settings or by accepting a project invite.
Verify sign-in
Open /login, enter the user's email and password, and confirm BaseBuddy opens Projects or the safe internal page the user requested.
If the login page shows an old magic-link or provider-specific flow, restart the app and confirm you are running the current release.
Common fixes
| Problem | What it usually means | How to fix it |
|---|---|---|
| User cannot sign in | Wrong password or user is not in app data | Recreate the user or use the correct password |
| User signs in but sees no projects | The account has no project membership | Invite or add the user to a project |
| Setup says local auth is missing | BASEBUDDY_AUTH_SECRET is missing | Set the env value and restart |
| Magic-link route returns an error | Magic links are not active in the current model | Use password sign-in |