> I'm working on a food ordering app. Just use SMS (enter phone number, text me a code, enter the code). They'll need to provide a phone number for the food pr

> I'm working on a food ordering app. Just use SMS (enter phone number, text me a code, enter the code). They'll need to provide a phone number for the food provider or deliverer to contact them anyway. > Password managers may or may not work in an app. Password managers work fine with apps. > Implementing password auth (as well as registration, password-reset/etc) is not trivial. You absolutely shouldn't roll your own user management or authentication at this point. It's extremely difficult to write such a system securely from scratch, and there are a million SaaS products that do it. Auth0 is respected, well-known, and not expensive[1]. The admin UI for devs is sometimes annoying, but their support is excellent and free. > Do I need to authenticate users at all? ...Maybe. You need some way for users to recover their order history if they lose their phone, for example. Perhaps there's a way you can get a unique identity through the Stripe process, not sure. 1. https://auth0.com/learn/two-factor-authentication/ https://auth0.com/learn/two-factor-authentication/