# Voila authentication

Voila uses browser authentication for account access and API tokens for CLI
workflows. Create an account at [/register](https://voila.show/register) or
sign in at [/login](https://voila.show/login). An owner can create an API token
from the authenticated settings page and use it with the Voila CLI to upload
recordings, manage access, and read review comments.

Treat magic links, session cookies, API tokens, signed playback URLs, and signed
upload URLs as credentials. Do not put them in source code, logs, screenshots,
or public comments. The API contract is available at
[/openapi.json](https://voila.show/openapi.json).