SuperTokens is an open-source authentication platform that provides secure, customizable user login and session management for web and mobile applications.

---

🚀 Overview

SuperTokens is a developer-friendly, open-source alternative to proprietary auth services like Auth0, Firebase Auth, and AWS Cognito. It allows you to add complete authentication—including sign-up, sign-in, sessions, MFA, social logins, and multi-tenancy—in minutes using prebuilt UI or custom SDKs.

The project solves the pain of building auth from scratch, which is time-consuming and error-prone, or relying on expensive, black-box SaaS providers that limit customization and lock you in. It's built for developers, startups, and enterprises who want full control, self-hosting, scalability, and no user limits.

We built it to make auth transparent, fast to implement, and cost-effective, with a unique architecture where your backend sits between frontend and core for maximum flexibility.

---

✨ Key Features

• Prebuilt UI components for email/password, passwordless (magic links/OTP), social/third-party logins (Google, GitHub, etc.), deployable in 5 minutes on your domain.
• Session management with access/ID tokens, revocation, device syncing, and multi-session support.
• Advanced security: MFA, roles/permissions, account linking, email/phone verification, custom password policies.
• Plugins for captcha (reCAPTCHA/Turnstile), user banning, tenant discovery, and more; multi-tenancy/SSO support.
• Upcoming/experimental: Enhanced SAML, profile management plugins (recent launches).

---

🛠 Tech Stack

• Frontend: JavaScript SDK, React, Angular, Vue, Next.js, Flutter, React Native, iOS (Swift), Android.
• Backend: SDKs for Node.js, Python (FastAPI/Flask/Django), Go, PHP, Ruby; core integrates via HTTP APIs.
• Core: Java-based HTTP service (self-hosted).
• Database: PostgreSQL (v13+ recommended), MySQL (legacy).
• Auth: Built-in (the product itself).
• Hosting: Self-hosted (Docker/VM/K8s), any cloud provider.

---

👥 Who Is This For?

This project is useful for:

• Developers who want to add secure auth quickly without vendor lock-in.
• Teams migrating from Auth0/Cognito seeking open-source control and savings.
• Indie makers and enterprises building scalable web/mobile apps with multi-tenancy needs.

---

📸 Screenshots / Demo

• Live demo: https://supertokens.com (interactive auth demos and example apps generator).
• GitHub: https://github.com/supertokens/supertokens-core

---

🔥 Project Status

• 🟢 Actively building

Last updated: 2026-03-24

---

❓ FAQ

Is this project free?

Open Source (free to self-host forever, unlimited users; optional paid support/consultancy).

Is the source code available?

Yes — https://github.com/supertokens (core at supertokens/supertokens-core, 15k+ stars; SDKs/plugins separate repos).

Can I contribute?

Yes—open issues/PRs on GitHub repos, join Discord (5k+ members) for discussions/feedback, or contribute via sponsorships.

---

📬 Contact & Links

• Website: https://supertokens.com
• GitHub: https://github.com/supertokens
• Twitter/X: https://x.com/supertokensio
• Email: team@supertokens.com

---

Built with ❤️ and kept warm on WarmIndex.