SuperTokens

SuperTokens provides open-source, self-hostable authentication — email/password, social login, passwordless, MFA, session management, and RBAC — plus a managed cloud service that's free up to 5,000 monthly active users and usage-priced beyond that.

Identity & Access ManagementOpen sourceSelf-hosted
Visit official website

Published Updated

CategoryIdentity & Access Management
AccessSelf-hosted
PricingOpen source
APIAvailable
Overview

What is SuperTokens?

SuperTokens is an open-source authentication and session-management stack covering email/password, social/OAuth login, passwordless magic links and OTP, multi-factor authentication, and role-based access control. The core is self-hostable at no cost with no user limits; SuperTokens also runs a managed cloud service that is free for up to 5,000 monthly active users, then billed at $0.02/MAU (minimum $100/month), with paid add-ons for MFA, account linking, and multi-tenancy.

Read the full overview

Sources checked 27 September 2026: official website, pricing page, documentation, GitHub.

Why teams use it

Key capabilities

  • Self-hosted core: Free, open-source authentication with no MAU limit when you run it yourself.
  • Managed cloud: Free up to 5,000 MAU, then usage-priced with a $100/month minimum.
  • Add-ons: Paid MFA, account linking, and multi-tenancy features on both deployment models.
Core areas

Core areas are authentication flows (password, social, passwordless), session management, MFA, and RBAC, deployable self-hosted or as a managed service.

Positioning

Shortlist SuperTokens if you want to self-host authentication for full data control at zero licensing cost, or want a managed alternative to Auth0/Firebase Auth with a genuinely free tier up to 5,000 MAU.

Why it matters

Compare the self-hosted (free, self-operated) and managed (free-to-5,000-MAU, then metered) paths against your team's ops capacity and expected user growth before committing to one deployment model.

Deployment & technical details

Technical details

Access
Self-hosted
Source model
Open source
Founded
2020
Headquarters
San Francisco, USA
Pricing model
Open source
API
Available
Published release
SuperTokens Core v12.2.0 ↗ (checked )
Source check
Primary source ↗ checked
Check with the publisher

Official resources

Before you shortlist

What to verify for your environment

Start from the users, systems and operating responsibilities the tool needs to support.

  • Confirm current features, licensing and support terms with the publisher.
  • Validate deployment, data location, access control, backup and recovery requirements.
  • Test integrations, export paths and a representative operational workflow before committing.
Community experience

Reviews of SuperTokens

No published reviews yet.

Loading review form…