SuperTokens
Open-source authentication you can self-host and own
SuperTokens is profiled here as a Authentication tool for engineering teams. Read about features, pricing, and how it compares to related options in the tools directory.
Description
SuperTokens is an open-source authentication provider founded in 2019 by Rishabh Poddar and Advait Ruia through Y Combinator. It supplies prebuilt login flows, session management, and user data storage, and runs against the team's own database so user records stay inside their infrastructure. The self-hosted core is Apache 2.0, with a managed cloud and paid add-ons for features such as multi-tenancy. Keeping user records inside the team's own database appeals to organizations with strict data-residency or privacy requirements. Prebuilt flows cover common login methods, so teams ship authentication without building each screen from scratch.
Key Capabilities:
Prebuilt UI and flows for email-password, passwordless, and social login
Secure session management with rotating refresh tokens
User data stored in the team's own database when self-hosted
Multi-tenancy with per-tenant login methods
Role-based access control and account linking
Self-hostable Apache 2.0 core with frontend and backend SDKs
Alternative tools
- Better Auth
Framework-agnostic authentication library for TypeScript
- Ory
Open-source identity, authentication, and access control
- Stytch
Authentication API for passwordless and B2B identity
- WorkOS
Enterprise-ready authentication and SSO for SaaS apps
- Keycloak
Self-hosted identity and access management server
- Clerk
Drop-in authentication and user management for modern stacks