Authentication for the apps you build

Identity infrastructure, without the busywork.

Give your users secure sign-in, sessions, and organizations. Give your team a complete API and dashboard to manage it all.

Read the docs Open dashboard

Email · passkeys · social sign-in · MFA · SSO

A safer session by default

Verified locally by your app

ES256
const session = await auth();

if (!session) {
  redirect("/sign-in");
}

// Verified locally against your instance JWKS

60 sec

token lifetime

Local

verification

Secure

refresh cookie

One platform, all the essentials

Authentication that grows with your product.

Every way to sign in

Email, social providers, passkeys, magic links, and multi-factor authentication in one hosted flow.

Passwordless and enterprise-ready

Sessions you can trust

Short-lived ES256 tokens verified locally, with refresh cookies and fast revocation.

No network hop on each request

Built for real teams

Organizations, invitations, roles, SAML single sign-on, and SCIM provisioning.

From first user to enterprise

A useful developer dashboard

Manage instances, keys, users, allowed origins, webhooks, email, and audit events.

The controls you need in one place

A complete API and SDK

Use the browser and React SDKs, Next.js helpers, or a backend API for your own services.

Fits your app and stack

Security at the foundation

Encrypted personal data, hashed secrets, origin checks, rate limits, and signed webhooks.

Careful defaults, not add-ons

Security by design

The details matter. They’re covered.

Personal data is encrypted at rest, while passwords and refresh tokens are never stored in recoverable form. Sessions are short-lived and checked against locally cached public keys.

Explore the security model
AES-256-GCM
Encrypted personal data
Argon2id
Hashed passwords
Origin checks
CSRF and CORS controls
HMAC signatures
Webhook verification

Made for your architecture

The right interface for every layer.

Browse the API reference
Frontend API
/v1/client/*
Publishable key + secure session cookie
Backend API
/v1/users · /v1/sessions · /v1/organizations
Secret key for your server
Token verification
/i/:instanceId/.well-known/jwks.json
Public keys; verify sessions locally

Start building

Your next sign-in flow starts here.

Get set up with the quickstart, then manage your instance from the dashboard.

Start with the docsOpen dashboard