Sign-up Modes
Choose the right sign-up strategy for your application's lifecycle and security requirements.
Overview
AuthCore supports three sign-up modes to match different stages of your application:
PUBLIC
Anyone can sign up freely
RESTRICTED
Only allowlisted emails
WAITLIST
Collect emails for launch
PUBLIC Mode
When to use: Production apps open to the public, consumer SaaS, open-source projects
Characteristics
- Anyone can create an account
- No pre-approval required
- Standard for consumer-facing applications
- Can still use blocklist and disposable email blocking
Configuration
Use Cases
Consumer SaaS
Productivity tools, social networks, marketplaces
Open Source Projects
Community platforms, documentation sites
Public APIs
Developer platforms, API marketplaces
RESTRICTED Mode
When to use: Internal tools, B2B SaaS, invite-only beta, enterprise apps
Characteristics
- Only allowlisted emails can sign up
- Manual approval workflow
- Perfect for controlled access
- Can use domain patterns (@company.com) or specific emails
Configuration
Use Cases
Internal Tools
Employee-only dashboards, admin panels
Pattern: @company.com
B2B SaaS
Pre-approved customer domains
Pattern: @client1.com, @client2.com
Private Beta
Curated tester list
Pattern: Individual emails
Partner Portals
Vendor and partner access
Pattern: Specific partner contacts
WAITLIST Mode
When to use: Pre-launch, coming soon pages, gradual rollout
Characteristics
- Collect emails without allowing sign-ups
- Build anticipation before launch
- Generate leads for launch day
- Easy transition to PUBLIC or RESTRICTED later
Configuration
Use Cases
Pre-Launch
Collect emails before your product launches
Feature Gating
Waitlist for new features in existing app
Gradual Rollout
Slowly invite users from waitlist
Transitioning from Waitlist
Comparison Table
| Feature | PUBLIC | RESTRICTED | WAITLIST |
|---|---|---|---|
| Sign-ups Allowed | ✓ Yes | ⚠ If on allowlist | ✗ No |
| Email Collection | - | - | ✓ Yes |
| Blocklist | ✓ Active | ✓ Active | - |
| Allowlist | Ignored | ✓ Required | - |
| Best For | Consumer apps | B2B, Internal | Pre-launch |
Changing Modes
⚠️ Warning: Changing from RESTRICTED to PUBLIC will allow anyone to sign up. Ensure this is intentional.
Best Practices
✅ Start with WAITLIST
Begin collecting emails before launch, then transition to RESTRICTED or PUBLIC.
✅ Use RESTRICTED for Internal Tools
Employee-only tools should always use RESTRICTED with company domain allowlist.
✅ PUBLIC + Disposable Blocking
Open sign-ups should still block disposable emails to reduce spam.
✅ Clear Communication
In RESTRICTED/WAITLIST modes, show clear messaging about why users can't sign up yet.