I didn’t realize how regulated phone numbers are
. But Twilio made the process pretty easy. Waiting for 24h to get approval to use a random mobile number seemed excessive. There are other providers who claim to be faster and cheaper than Twilio. But I was wary about using a company I hadn’t heard of before. Now that it’s set up, the provider is a non factor - it has worked as intended.
What other providers were you considering?
I only checked out Plivo and Telnyx. I hadn’t heard of either so went with Twilio.
so if you have an App, that needs a log in, every time the user want to use the app, you get charged 5c from Twilio. Do you get charged that every time a person closes the app and then re opens it. Another 5c? Can the device or phone not store that info for future log ins?
Yes - they get a unique 6 digit code sent via Twilio to their mobile. The cost is less than 1 cent per message. So the cost is very minimal. If they close the app and want to log in again they have to go through the process and get a new code (that’s how it is with my app). But you need to configure your login experience based on what you are trying to accomplish.
My app is used by my clients for the execution of price changes. They are unlikely to be coming and going from the app multiple times per day. Once a day is probably average. However the overriding objective in using this type of authentication was to avoid storing any passwords. Since most people reuse the same passwords for multiple sites, I didn’t want to be a source of security vulnerability.
A practice that is getting more and more common.
Thank you for this Ryan!
I was just about to go on a full-on rant about the potential of Replit spamming my clients when I use Replit’s built-in Auth.
I used an old email address to test the Replit authorisation and have now received 3 “spam” emails from Replit. And since they are spacing the spam out by 3 days I’m expecting another shortly.
This just so not on I can barely contain myself.
Not only is it not on but in Europe it might even be downright illegal unless there’s a check-box that I missed when registering for access saying you’d be marketed to by an outside company. They take that kind of sharing (stealing?) of information between businesses very very seriously over here.
So, yea. Thank you for the video on Firebase and for confirming that I wasn’t the only person experiencing Replit “not” sending marketing emails to customers of Replit coders using their built-in login functionality.
TFS
I was looking into doing this, I will have to check out the video because I have had the agent build the login system initially and i built upon it but this would onboard users so much easier. Thanks for the walkthrough, I haven’t had the time to wrap my head around upgrading to firebase auth.
It’s so much easier now than it was. The LLMs have really improved. I wouldn’t be fearful of hot swapping auth like I was in the past.
The biggest issue will come in the form of FUID and UID translations and session tokens but again, typically a few prompts and you’re good to go.
I haven’t migrated a large user base personally, however, which could be a headache and probably force password resets.
luckily I only have about 60 active users buying diamonds so its not a big problem, i would like to solve this now because the page is starting to gain traction on google for long key words and we are getting more and more traffic weekly and easier signup would probably help immensely. this is my project this weekend haha.
![]()
What’d I tell you? Like clockwork.
Seriously. Not cool Replit.
TFS
Sorry. I will start a new thread about this because it’s just not on…
As per Eric’s video and him mentioning Replit saying they don’t market to our customers.
Despite Replit’s denial they sure do have a funny way of confirming that you’ve had to unsubscribe to something you never signed up for and that they definitely don’t call marketing…
I’ve raised this with the team as well, there is indeed some marketing going on that shouldn’t be. It’s being worked on.
