> ## Documentation Index
> Fetch the complete documentation index at: https://tracecat-codex-docs-secrets-oauth-discoverability.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Basic

> Authenticate into self-hosted Tracecat with basic email-and-password sign-in: configure user accounts, password policies, and admin bootstrap for small deployments.

<Warning>
  In production, use OIDC or SAML SSO. Basic auth is meant for local development only.
</Warning>

## Overview

Basic auth lets you sign in to Tracecat with an email and password.

<img src="https://mintcdn.com/tracecat-codex-docs-secrets-oauth-discoverability/81inBqvOX5JSPQnT/img/self-hosting/sign-in.png?fit=max&auto=format&n=81inBqvOX5JSPQnT&q=85&s=7c5fa23fd396caf94c4a3aa50e3b821e" alt="Tracecat sign-in" width="2128" height="1508" data-path="img/self-hosting/sign-in.png" />

## Configuration

In your `.env` file, enable the basic auth type:

```bash theme={null}
TRACECAT__AUTH_TYPES=basic
```

You can also combine auth types if you need to:

```bash theme={null}
TRACECAT__AUTH_TYPES=basic,oidc
```

## Minimum password length

When you use basic auth, your password must be at least
`TRACECAT__AUTH_MIN_PASSWORD_LENGTH` characters long. The default minimum is `12`.
