SuperTokens, Open Source User Authentication

SuperTokens is an open-source authentication platform that provides secure, customizable user login and session management for web and mobile applications.

🚀 Overview

SuperTokens is a developer-friendly, open-source alternative to proprietary auth services like Auth0, Firebase Auth, and AWS Cognito. It allows you to add complete authentication—including sign-up, sign-in, sessions, MFA, social logins, and multi-tenancy—in minutes using prebuilt UI or custom SDKs.

The project solves the pain of building auth from scratch, which is time-consuming and error-prone, or relying on expensive, black-box SaaS providers that limit customization and lock you in. It's built for developers, startups, and enterprises who want full control, self-hosting, scalability, and no user limits.

We built it to make auth transparent, fast to implement, and cost-effective, with a unique architecture where your backend sits between frontend and core for maximum flexibility.

✨ Key Features

Prebuilt UI components for email/password, passwordless (magic links/OTP), social/third-party logins (Google, GitHub, etc.), deployable in 5 minutes on your domain.
Session management with access/ID tokens, revocation, device syncing, and multi-session support.
Advanced security: MFA, roles/permissions, account linking, email/phone verification, custom password policies.
Plugins for captcha (reCAPTCHA/Turnstile), user banning, tenant discovery, and more; multi-tenancy/SSO support.
Upcoming/experimental: Enhanced SAML, profile management plugins (recent launches).

🛠 Tech Stack

Frontend: JavaScript SDK, React, Angular, Vue, Next.js, Flutter, React Native, iOS (Swift), Android.
Backend: SDKs for Node.js, Python (FastAPI/Flask/Django), Go, PHP, Ruby; core integrates via HTTP APIs.
Core: Java-based HTTP service (self-hosted).
Database: PostgreSQL (v13+ recommended), MySQL (legacy).
Auth: Built-in (the product itself).
Hosting: Self-hosted (Docker/VM/K8s), any cloud provider.

👥 Who Is This For?

This project is useful for:

Developers who want to add secure auth quickly without vendor lock-in.
Teams migrating from Auth0/Cognito seeking open-source control and savings.
Indie makers and enterprises building scalable web/mobile apps with multi-tenancy needs.

📸 Screenshots / Demo

Live demo: https://supertokens.com (interactive auth demos and example apps generator).
GitHub: https://github.com/supertokens/supertokens-core

🔥 Project Status

🟢 Actively building

Last updated: 2026-03-24

❓ FAQ

Is this project free?

Open Source (free to self-host forever, unlimited users; optional paid support/consultancy).

Is the source code available?

Yes — https://github.com/supertokens (core at supertokens/supertokens-core, 15k+ stars; SDKs/plugins separate repos).

Can I contribute?

Yes—open issues/PRs on GitHub repos, join Discord (5k+ members) for discussions/feedback, or contribute via sponsorships.

📬 Contact & Links

Built with ❤️ and kept warm on WarmIndex.

Loading