Security issues unable to fix in Suprabase given the recommendations by Lovable.dev. How can i fix in Suprabase?

[gbw1cb-beep]

Having an the following issue with Suprabase according to Lovable.dev. Lovable gave a detailed answer to solve the security issue. The challenge is Suprabase does not automatically fix the issue once requested by user like Lovable does. I tried to fix manually but was unable. The following is the text message from lovable.dev created to fix the security issue in Suprabase: I can guide you on exactly what to fix. Here are the steps to resolve both security issues:

Fix 1: Auth OTP Long Expiry
Go to your Supabase dashboard → Authentication → Settings
Look for "OTP Expiry" or "Email OTP validity" setting
Reduce the expiry time to a recommended value (typically 24 hours or less)
Fix 2: Enable Leaked Password Protection
Go to your Supabase dashboard → Authentication → Settings
Look for "Password Security" or "Password Protection" section
Enable "Leaked password protection" toggle
Once you've made these changes in your dashboard, the security warnings should be resolved.

[GaryAustin1]

1. Email section of providers in authentication settings.

2. Email section of providers in authentication settings.

[gbw1cb-beep]

I do not see the Email OTP expiration on my screen. What I see is attached below. Look at the right side. It only goes to Password Requirements...it does not show Email OTP expiration on my screen. What do I do in this case? [image: image.png]

…

On Sun, Aug 24, 2025 at 10:01 PM GaryAustin1 ***@***.***> wrote: 1. Email section of providers in authentication settings. image.png (view on web) <https://github.com/user-attachments/assets/a78d9f49-782a-4328-a18b-815c81121a51> 2. Email section of providers in authentication settings. image.png (view on web) <https://github.com/user-attachments/assets/051c653c-968b-4e92-ab94-17b9e572cee0> — Reply to this email directly, view it on GitHub <#38169 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BWDBJGRWP44ZRHHEE72K33L3PJU7BAVCNFSM6AAAAACEWMCWC6VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTIMRQGU2DKNQ> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[GaryAustin1]

Your image did not show up. Did you scroll down that section?

[gbw1cb-beep]

Yes, I did.

…

On Mon, Aug 25, 2025 at 8:57 AM GaryAustin1 ***@***.***> wrote: Your image did not show up. Did you scroll down that section? — Reply to this email directly, view it on GitHub <#38169 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BWDBJGQOBEAG7C5YSJBBI5T3PMB3LAVCNFSM6AAAAACEWMCWC6VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTIMRRGA2DCNI> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[GaryAustin1]

Try a different browser or device. It is towards the bottom of this page with lots of other options. https://supabase.com/dashboard/project/_/auth/providers?provider=Email