Core ConceptsAuthentication
Core Concepts

Authentication and Account Management

Understand how to securely access your account, manage permissions, and handle login issues in Zwift Community.

const response = await fetch('https://api.example.com/v1/me', {
  headers: { 'Authorization': 'Bearer YOUR_TOKEN' }
});
{
  "id": "user123",
  "email": "user@zwift.community",
  "role": "member"
}

Overview

Secure authentication ensures you can safely access Zwift Community features like team management, event participation, and personal dashboards. Zwift Community supports multiple login methods including email/password and OAuth providers. You manage user roles for team admins, members, and guests, with built-in verification and recovery processes.

Zwift Community prioritizes security with OAuth 2.0, rate limiting, and encrypted sessions. Always use HTTPS endpoints.

Authentication Methods

Choose from flexible login options tailored to your needs.

Create an account or log in directly via email.

Sign Up

Visit https://zwift.community/login and enter your email and password.

Verify Email

Check your inbox for a verification link and click to confirm.

Log In

Return to the login page and authenticate.

API Authentication Parameters

Use these parameters for programmatic access to Zwift Community APIs.

header
Authorizationstring
Required

Bearer {YOUR_ACCESS_TOKEN} for all authenticated requests.

query
client_idstring
Required

Your application client ID from the developer dashboard.

query
redirect_uristring

Callback URL after authentication (max 256 characters).

Account Verification

New accounts require email verification to participate in events and teams.

Request Verification

Log in and navigate to Account > Security.

Check Email

Open the verification email from no-reply@zwift.community.

Confirm

Click the link or enter code: ABC123XYZ

User Roles and Permissions

Zwift Community defines roles to control access.

Password Recovery

Recover access quickly if you forget your password.

Never share recovery codes. Store them securely offline.

Initiate Recovery

Go to https://zwift.community/forgot-password and enter your email.

Receive Link

Check spam if not in inbox (expires in 15 minutes).

Reset Password

Enter new password (min 12 chars, 1 special).

Security Best Practices

  • Rotate tokens every 90 days.
  • Use role-based access: assign minimal permissions.
  • Enable 2FA in Account > Security.

For API examples: