Subscribe
Sign in
Fast — World's fastest login and checkout
Fast is the easiest way to securely login.
The Fast button can be easily added to any website for secure one-click login for all users.
Fast supports 100% of users, authenticating through email, and doesn’t require users to have a Fast account.
Login, Fast!
96
Replies
Best
@caffeinewriter will definitely be launching a bug bounty program, stay tuned. The paid product is about making it even easier again to login. Business/website will pay per user per month for that product, marginal cost.
@caffeinewriter but we will still keep the current product free as a feeder for the next!
UI design is a little haphazard, long email overhanging boundaries, hamburger menus in the middle of the top nav. These small details build trust especially important for authentication.
Pros:Nice implementation of email based authentication
Cons:Lots of opportunity for polish improvements. Details matter for trust.
Great idea;) question - let's say our user typed their email with a typo mistake. Started using our app (we we started to connect things they did to their account) - since they never confirmed their email such accounts are still "guests" then correct? until user actually confirms their email we should not treat such login as authed?
@masterserge if they typed their email wrong, they would never receive the authentication email and wouldn't be logged in through fast with that email. We would direct them back to correct their email.
Try out logging in with the Fast Button, it's like magic:
Login first at https://fast.co
Then try our one click login one any of Fast powered site, such as https://24hundred.net/account/login
Got your own website? Put the Fast button on your site in 2 lines of code, and make it easy to login! - https://fast.co/developer/docs
Hey @domm, first of all congratulations for the successful launch. While testing, I encountered this error http://i.mythemeshop.com/yEtNPg
I like the idea and the execution, but would love more info on the security and tech behind it.
an aside: is it built on Laravel?
@danmatthews what we are doing is scaling authentication, it doesn't make sense that we continually re-login everywhere and duplicate authentication over & over. So Fast authenticates a user, using existing and accepted industry security, then provides access to that authenticated token to multiple services/websites.
Built with PHP (Not Laravel) / GoLang / Node
@domm Thanks for the reply, i really like it, gonna add it to a few apps i use - one of which is used daily by university students who just can't seem to ever remember their password.
Are you planning to charge for it in the future? I'll probably stick it on https://endear.app when we launch too, i like the idea.
@danmatthews Fantastic, looking forward to having you onboard - let me know as you launch them domm@fast.co. This product is our free product, we have a v2 paid product already in beta which is the next gen 'easier' version of this!
I'm curious about your checkout product. Is it like Apple Pay where you are providing the merchant account as well, or are you passing all the card info to the merchants shop for them to use their already existing gateway?
Really good idea but I am wondering how do you comply with GDPR because sharing session information across fast.co users doesn't seem very compliant. Also I would like to know how you handle security risks like XSS as this seems to be a very weak point.
@jacobo_vidal the only PII we deal with is email and IP and it is strictly used to perform authentication. Regarding XSS, even if another service intercepted a token has no value other than to prove that the user is authenticated. And that authentication can only be proven with a private key from the original site anywho.
@jacobo_vidal but great questions, thanks a lot for getting involved and trying out Fast!
Looks like a Magic Link as a service? Any reason this is different or better than just implementing a magic link flow to an app? Just easier to integrate / build perhaps?
@domm this is great, but I wonder if you have any thoughts about how something like this could work in native mobile apps instead of on a browser where you can easily track a user across multiple websites using cookies. I'd imagine it'd be much more difficult to get something like this functioning for native mobile applications.
Seems a really nice option in today's world where all the big companies try to extract data for their own purpose.
@gauravbora completely agree, and the reality is we don’t need profile or user information to perform authentication.
IMO centralisation of authentication can be dangerous. If the user's Fast account is compromised, they are royally screwed.
@dmitry_gorshkov obviously any service providing authentication including Fast needs to be acutely aware of security risks. However, currently the weakest attribute of Fast currently is the email account, which is already the webs weakest links with reset password links. We actually don’t have Fast accounts so there is no ‘account’ feature that is vulnerable. And we have actually seen huge amounts of vulnerability because of duplication of authentication, same passwords used everywhere, unencrypted passwords on servers, decryptable passwords etc... there are a lot of userability, scalability and security benefits you can receive from utilising one authentication engine.
This will really change everything about how we login to sites. It’s a no-brainer and can see this being widely adopted at a rapid rate.
I have been waiting for something like this. How can it prevent users thinking the site is weakly secured? - Maybe the button needs strengthening up.
@sturusell button is absolutely key to messaging, but we also leverage the trust of the host site. Bigger the network of installed sites, the bigger the inferred trust for the user.
Looking great, I can't wait to see this out in the world with more and more platforms. Gotta think this is awesome for D2C brands too.
@petedavisuk Absolutely, for eCommerce = gain sales and reduces cart abandonment, for SAAS increase retention and LTV!
@amjad_ali4 absolutely planning on support for easy install on WooCommerce. Button customisation a deeper discussion as it’s more important to have common branding for users to understand they can easily login at a glance!
@domm How can a user who signed up with emailA change their email to emailB in our app?
@mikestaub you need to give them that functionality in your app, then next time they login with the new email through Fast will be as normal 👌
Easy login is always an issue, this is a great product. Failed logins are costing businesses alot more than they realize, great work!
People are more likely to add a password than verify their email. Some of the reasons why is because first -- accounts are known to have password so a user knows they will have to add a password. Another reason is verifying an email requires more time than setting a password. Also verifiying emails dont always block the user from using a product. This is why Facebook and Google sign ups are so powerful. But I like the concept.
Emoji Ipsum