Pewterkit Check · Sign-in
Does Google’s sign‑in show your domain?
If Google’s sign-in screen says “continue to your-app-1234.firebaseapp.com” or “xxxx.supabase.co”, your users see an address they don’t know. Check yours free, then get the fix for your stack.
Free scan · pay only for the fixes you pick · See a sample report
Your launch check
Owner confirmed: the deeper Security checks ran on this site.
Run the deeper checks on your site
Show us the site is yours with one of these, then press Check now. We then test your database rules, private files and API settings, reading counts and sizes only.
Option 1, DNS: add a TXT record. Name/Host: Value:
Option 2, a file: publish containing
Every check we ran on your site passed
Your launch basics look ready for customers. Made a big change? Run the check again before you share the link.
Pick the categories you want fixed
Pick the categories you want fixedEvery finding comes with its evidence.
The exact line, header or record we read on your live site. Every check is tested against a broken site and a healthy one before it ships, and you can confirm every fix you buy with a re‑check.
What the sign-in check reads
One free scan covers all six categories; this page puts Sign-in first.
- The name Google showsWhether Google’s sign-in screen names your own domain, your Firebase project’s firebaseapp.com address or your Supabase project’s supabase.co address.
- No development keysClerk test keys, Auth0 development tenants or Firebase emulator settings on the live site.
- No localhost linksSign-in and email links that still point at localhost.
- Ready for Google brand verificationPrivacy policy and terms linked from your home page, so Google can show your app’s name and logo.
Sign-in fixes come as Signhome, by Pewterkit, in the same checkout as the other five categories.
Why it matters
Google names the address that handles sign-in. Until that address is your own domain, people see your platform’s address at the moment they decide whether to trust your app.
Guides
Plain-English fixes with sources, from Pewterkit Guides.
- Google sign-in shows your supabase.co URL: fix it with a Supabase custom domain
- How to change Firebase authDomain to your own domain
- Firebase authDomain: what it is, where to find it, and when to change it
- How to change the app name and logo on Google sign-in for a Firebase app
- Error 400: redirect_uri_mismatch, what it means and how to fix it
- "Access blocked: This app's request is invalid" - find the real error and fix it
All six checks, in the same scan
Pick the categories you want fixed, or take all six. One payment.