2025-07-29 UTC
# 
Chailotl If it is not already documented somewhere, I think it would be a good idea to have a best practices for how to offer IndieAuth login (teaching users about protecting themselves against scams, detecting suspicious logins when an alternate account is used for login, recovery methods when domain is lost)