Applogin adds Google and email/password authentication to any website. The login form lives in a secure iframe on applogin.one — your page never sees the password and only receives an app-scoped token.
Sign-in, sign-up, email codes and password reset — rendered by Applogin, not by you.
One account per email across all your apps. Google and password link to the same identity.
Apps embedded under one site share the session — sign in once, stay signed in.
Tokens are signed per app (HS256, aud = app_id) and are useless anywhere else. Verify locally or via the API.
Register your app in the dashboard and list its allowed origins.
Add two scripts and call ApploginUI.mount({ appId }).
Receive { token, user } and verify the token on your backend.
<script src="https://applogin.one/applogin.js?v=1"></script>
<script src="https://applogin.one/applogin-ui.js?v=1"></script>
<script>
ApploginUI.mount({
appId: "app_your_id",
onAuth: (user) => renderApp(user),
onLogout: () => showLanding()
});
</script>AppDock opens Email Writer and Audio Recorder in iframes. Sign in inside one of them — the other picks the session up automatically.