Login

The standard email-and-password sign-in card, with remember-me and a forgot-password escape hatch. Do: Treat "Remember me" as extending session length, never as the only thing standing between a device and the account. Don't: Rely on the remember-me checkbox as a security boundary. Do: Style "Forgot your password?" as a link beneath "Sign in" — one unmistakable primary action per card. Don't: Give "Forgot your password?" the same solid button treatment as "Sign in" — now two buttons compete to be primary. Use login-split-panel when the sign-in is a full page, not an embedded card, and you want a branded testimonial panel alongside it. Use login-minimal when you want the leanest possible sign-in — a single email field for a one-time code, no password at all. Use login-oauth when most of your users sign in through Google, GitHub, or Apple rather than a password you store. Use forgot-password when the user has already clicked "Forgot your password?" — that's a separate card, not a state of this one.