Skip to content
aicoolies logo
SuperTokens logo

SuperTokens

Open-source authentication with self-hosting

SuperTokens is an open-source authentication solution with 14K+ GitHub stars providing email/password, passwordless, social login, MFA, session management, and user management. Designed for self-hosting with Docker — full control over user data with no vendor lock-in. Pre-built UI components for React, Vue, and vanilla JS. Backend SDKs for Node.js, Python, and Go. Managed cloud option also available. Emphasizes security with rotating refresh tokens and anti-CSRF protection by default.

About SuperTokens

SuperTokens provides open-source authentication focused on self-hosting and data ownership. 14K+ GitHub stars. Docker-based deployment gives teams full control over their auth infrastructure and user data.

Supports email/password, passwordless (magic links, OTP), social OAuth (Google, GitHub, Apple, etc.), multi-factor authentication, and session management with secure rotating refresh tokens.

Pre-built UI components for React, Vue, Angular, and vanilla JS handle login flows. Backend SDKs for Node.js, Python, and Go integrate with any server framework. User management dashboard included.

Self-hosted with Docker or SuperTokens managed cloud. Free tier for both deployment options. Anti-CSRF protection, token rotation, and security best practices enabled by default.

Pricing & Platform Specs

Pricing Summary

Open-source authentication and session management architecture under Apache-2.0 license (15k+ GitHub stars) offering $0 software license fees for self-hosting with unlimited MAUs. SuperTokens Managed Cloud provides a Free Tier ($0/mo for up to 5,000 MAUs and unlimited sessions), Pay-as-you-go at $0.02 per additional MAU over 5,000, and Enterprise custom tiers with SAML/OIDC SSO (Okta, Azure AD), B2B multi-tenancy, SOC 2 Type II, HIPAA compliance, 99.99% uptime SLA, and 24/7 dedicated support.

full pricing breakdown →

Supported Platforms

Self-hosted, Docker, Node.js, Python, Go

Explore categories, tags & use cases

Open-source auth infrastructure for modern apps

Logto is an open-source authentication and authorization platform built on OIDC and OAuth 2.1, serving as an alternative to Auth0, Cognito, and Firebase Auth. It provides pre-built sign-in flows with customizable UI, social login, Google One Tap, MFA, enterprise SSO via SAML, and role-based access control. SDKs cover 30+ frameworks including React, Next.js, Vue, Flutter, Go, and Python, with multi-tenancy support for SaaS applications.

freemiumOpen Source

Open-source IAM and SSO platform by Casbin

Casdoor is an open-source Identity and Access Management platform built by the Casbin community in Go and React. Supports OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, and MFA with a comprehensive web-based admin UI. Provides multi-tenant organization management, flexible RBAC and ABAC access control via Casbin models, and integrations with Google Workspace and Azure AD. Offers self-hosted deployment with optional managed cloud plans.

Open Source

Community experience

Sources & verification

Sources checked
Content verified

Verification dates are editorial checks. Routine CMS saves and automatic updatedAt timestamps do not advance them.

FAQ

What is SuperTokens?

SuperTokens is an open-source authentication solution with 14K+ GitHub stars providing email/password, passwordless, social login, MFA, session management, and user management. Designed for self-hosting with Docker — full control over user data with no vendor lock-in. Pre-built UI components for React, Vue, and vanilla JS. Backend SDKs for Node.js, Python, and Go. Managed cloud option also available. Emphasizes security with rotating refresh tokens and anti-CSRF protection by default.

Is SuperTokens free?

SuperTokens offers a free tier alongside paid plans. Open-source authentication and session management architecture under Apache-2.0 license (15k+ GitHub stars) offering $0 software license fees for self-hosting with unlimited MAUs. SuperTokens Managed Cloud provides a Free Tier ($0/mo for up to 5,000 MAUs and unlimited sessions), Pay-as-you-go at $0.02 per additional MAU over 5,000, and Enterprise custom tiers with SAML/OIDC SSO (Okta, Azure AD), B2B multi-tenancy, SOC 2 Type II, HIPAA compliance, 99.99% uptime SLA, and 24/7 dedicated support.

Is SuperTokens open source?

Yes — SuperTokens is open source.

Is SuperTokens still maintained?

Yes — SuperTokens is active. Its listing was last verified on September 6, 2026.

What are the best SuperTokens alternatives?

The first editor-selected SuperTokens alternatives are Logto, Casdoor.

How does SuperTokens score in our review?

The published editorial review lists SuperTokens at 85/100 overall across speed, privacy, and developer experience. Check the review's evidence status and test metadata for its verification level.