> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tracecat.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Basic

> Authenticate into self-hosted Tracecat with basic email-and-password sign-in: configure user accounts, password policies, and admin bootstrap for small deployments.

<Warning>
  In production, use OIDC or SAML SSO. Basic auth is meant for local development only.
</Warning>

## Overview

Basic auth lets you sign in to Tracecat with an email and password.

<img src="https://mintcdn.com/tracecat/9IEnC4OWdnuB3EvN/img/self-hosting/sign-in.png?fit=max&auto=format&n=9IEnC4OWdnuB3EvN&q=85&s=2516cde2176447c7856893cd24cc7f2d" alt="Tracecat sign-in" width="2128" height="1508" data-path="img/self-hosting/sign-in.png" />

## Configuration

In your `.env` file, enable the basic auth type:

```bash theme={null}
TRACECAT__AUTH_TYPES=basic
```

You can also combine auth types if you need to:

```bash theme={null}
TRACECAT__AUTH_TYPES=basic,oidc
```

## Minimum password length

When you use basic auth, your password must be at least
`TRACECAT__AUTH_MIN_PASSWORD_LENGTH` characters long. The default minimum is `12`.