Every password your customers create is a small liability you inherit. They forget it, so they email you. They reuse it from another site that got breached, so now their account with you is at risk too. And every "reset your password" link is one more chance for someone to give up before they ever finish signing in.

The software ArchitexIDE builds now offers a way around all of that.

Customers can sign in with a passkey — the same Face ID, fingerprint, or screen lock they already use to unlock their phone — or with a one-tap link sent to their email. No password to type, forget, or reuse. Nothing for an attacker to steal, because there's no shared secret sitting in a database. And for anyone who still prefers a plain old password, that's there too, now backed by an optional six-digit code for a second layer of protection.

This isn't a mockup. The full sign-in stack — passwords, two-factor codes, passkeys, and magic links — is generated and working in a holiday booking experience we built with the pipeline.

Here's why it's worth an update of its own: modern, secure sign-in is normally weeks of specialist work that most small businesses never get. Because ArchitexIDE learned it once, every business it builds from here can offer it — without you ever thinking about the plumbing underneath.

Still rough

Passkeys are proven end-to-end in the holiday booking experience, but they're not yet switched on by default in every new build — we're finishing the work to make secure sign-in the standard starting point for every app, not something we wire in per project.