Open Source Auth0 Alternatives

Secure authentication without per-user pricing. Open source Auth0 alternatives for SSO, MFA, passwordless login, and user management you own.

9 alternatives available

Auth0 simplifies the process of adding secure login and user management to applications. It handles crucial tasks like registration, password resets, multi-factor authentication, and user profile management, allowing developers to focus on building their core product. While powerful, Auth0’s commercial nature and vendor lock-in can be drawbacks for some projects. Users often seek open source alternatives to maintain greater control over their data, avoid recurring costs, and customize the platform more extensively.

The core value proposition of Auth0 lies in its comprehensive suite of features. Universal Login, Single Sign-On (SSO), and robust security protocols like Multi-Factor Authentication are key draws. However, the need for customization and self-hosting can drive developers to explore alternatives that offer more flexibility. Furthermore, concerns regarding data privacy and compliance may lead users to prefer the transparency of open source solutions.

Use cases for Auth0 are diverse, spanning from securing web and mobile applications to enabling authentication in APIs and microservices. Increasingly, Auth0 is being used to secure AI agents, which necessitates strong identity and access controls. However, for projects with specific security requirements or limited budgets, finding a self-managed open source Auth0 alternative is often desired.

Open Source Alternatives

Go
86%
Apache 2.0
91

Authelia

Security · Authentication

28,189

OpenID Certified SSO and MFA portal for securing self-hosted web applications behind reverse proxies.

View details

Authelia

Apache 2.0
1,429
Forks
9.6 years
Age
Built with
Go86%
TypeScript12%
Updated yesterday
Java
98%
Other
88

SuperTokens

Authentication · Security

15,135

Open-source authentication platform you self-host, giving you complete control over user data with zero vendor lock-in.

View details

SuperTokens

Other
677
Forks
6.5 years
Age
Built with
Java98%
Updated 3 days ago
TypeScript
97%
MPL 2.0
90

Logto

Authentication

13,753

Open-source auth infrastructure for SaaS and AI apps with OIDC, SAML, and RBAC

View details

Logto

MPL 2.0
943
Forks
5 years
Age
Built with
TypeScript97%
Updated 3 days ago
Go
91%
Apache 2.0
90

Ory Kratos

Authentication

13,737

API-first identity and user management that handles login, registration, MFA, and recovery so your application never has to.

View details

Ory Kratos

Apache 2.0
1,166
Forks
8.1 years
Age
Built with
Go91%
Updated 3 days ago
Go
67%
Other
89

Hanko

Security · Authentication

8,965

Open source, self-hostable authentication platform with passkeys, SAML SSO, and OAuth — the privacy-first alternative to Auth0 and Clerk.

View details

Hanko

Other
1,015
Forks
4.3 years
Age
Built with
Go67%
TypeScript28%
Updated 4 days ago
Go
100%
Apache 2.0
89

SpiceDB

Security · Authentication · Databases

6,832

An open source, Google Zanzibar-inspired authorization database that models permissions as relationships and evaluates fine-grained access checks at massive scale with single-digit millisecond latency.

View details

SpiceDB

Apache 2.0
402
Forks
4.9 years
Age
Built with
Go100%
Updated 3 days ago
TypeScript
92%
Other
88

Hexclave

Developer Tools · Authentication

6,820

The open-source user infrastructure platform — authentication, teams, payments, emails, analytics, and more on a single unified user model.

View details

Hexclave

Other
520
Forks
2.4 years
Age
Built with
TypeScript92%
Updated yesterday
TypeScript
79%
AGPL 3.0
81

VoidAuth

Security · Authentication

2,180

Self-hosted SSO with OIDC, LDAP, passkeys, and proxy auth for your entire self-hosted stack

View details

VoidAuth

AGPL 3.0
74
Forks
1.2 years
Age
Built with
TypeScript79%
HTML14%
Updated yesterday
Go
55%
Apache 2.0
88

Authgear

Authentication

1,880

Open-source, self-hostable authentication platform with passkeys, biometric login, SSO, MFA, and GraphQL admin API — a full Auth0/Clerk/Firebase alternative for SaaS and mobile apps.

View details

Authgear

Apache 2.0
121
Forks
6.1 years
Age
Built with
Go55%
HTML26%
TypeScript17%
Updated 3 days ago

Join founders buildingwith open source

Opinionated takes, migration guides, cost-saving tips, and insights from the open source ecosystem.

Subscribe on Substack

No spam. Unsubscribe anytime.

Join 750+ subscribers
No spam. Unsubscribe anytime.

Search