Rust-native middleware. 6 auth methods. BotShield fraud scoring. Multi-tenant from day one.
npm install @auth1/react — drop in <SignIn /> — ship.
import { Auth1Provider, SignIn } from '@auth1/react';
function App() {
return (
<Auth1Provider apiKey="auth1_pk_...">
<SignIn
methods={['phone', 'email', 'google', 'github']}
onSuccess={(user) => console.log('Welcome', user.name)}
/>
</Auth1Provider>
);
}From npm install to production in under 5 minutes
npm install @auth1/react
Configure your tenant
Full auth with fraud protection
Already have an app? Add Auth1 in 5 minutes.
Start FreeSMS OTP, magic links, OAuth, MFA, fraud protection, and multi-tenancy — in one platform. No add-ons.
SMS OTP with VOIP detection, Email OTP, Magic Links, Email + Password, OAuth (Google, GitHub, Apple), and TOTP/MFA with backup codes. All in one platform.
Auth middleware compiled to native code via napi-rs. JWT verification, tenant resolution, and rate limiting fused into a single native call.
BotShield + AI fraud scoring on every public endpoint. VOIP detection blocks fake numbers. 3-layer rate limiting: Rust token bucket, Redis sliding window, app-level lockout.
Built for SaaS. Every query scoped by tenant. Custom branding per tenant — SMS sender name, email templates, colors, logos. Isolated rate limits. Not bolted on.
<SignIn />, <SignUp />, <UserProfile />, <ProtectedRoute />. Dark and light themes. Works in 5 minutes. Also available as a core JS SDK.
Deploy on your servers. Docker, Kubernetes, or AWS. Full source code. No vendor lock-in. Or use our managed cloud.
Password hashing with Argon2id through a native Rust module. Not JS bcrypt. Constant-time OTP comparison prevents timing attacks.
Optional ML-DSA-65 (Dilithium) signatures on webhooks. Kyber key exchange module available. PQ public key at /.well-known/pq-public-key.
Circuit breakers for Twilio, SES, Stripe, Redis. HMAC-signed webhooks with 5 retry attempts. Structured JSON logging. Health checks at /health/ready and /health/live.
Side-by-side with Auth0, Clerk, and SuperTokens
| Feature |
auth1
|
Auth0 | Clerk | SuperTokens |
|---|---|---|---|---|
| Price (10K MAU) | Free | Free | Free | Free (self-hosted) |
| Price (50K MAU) | $79/mo Best value | $375+/mo | Free | $900/mo |
| Price (100K MAU) | $329/mo | $750+/mo | ~$1,000/mo | $1,800/mo |
| Rust Native Performance | ✓ 42x faster | ✗ | ✗ | ✗ |
| SMS + Email + Magic Link + OAuth + MFA | ✓ All included | ✓ All included | ✓ All included | ✓ All included |
| BotShield + Fraud Scoring | ✓ Built-in | CAPTCHA (paid plans) | ✗ | ✗ |
| VOIP Detection | ✓ Built-in | ✗ | ✗ | ✗ |
| Multi-Tenant Native | ✓ Yes | Organizations add-on | Organizations | ✓ Yes |
| Post-Quantum Ready | ✓ ML-DSA-65 | ✗ | ✗ | ✗ |
| Self-Hostable | ✓ Full source | ✗ | ✗ | ✓ Yes |
| React Components | ✓ <SignIn /> | SDK + Redirect | ✓ <SignIn /> | ✓ <SignIn /> |
| Password Hashing | ✓ Argon2id (Rust) | bcrypt | bcrypt | bcrypt |
All providers offer generous free tiers. Auth1's advantage is at scale: $0.005/MAU overage vs $0.015 (Auth0/Cognito) and $0.02 (Clerk/SuperTokens). Plus unique features no competitor offers: Rust middleware, VOIP detection, and post-quantum security.
No hidden fees. No surprise charges. Cancel anytime.
Perfect for small apps
14-day free trial • No credit card required
For growing applications
14-day free trial • No credit card required
For production apps
14-day free trial • No credit card required
For large-scale deployments
Yes. Every tier includes BotShield, AI fraud scoring, VOIP detection, and 3-layer rate limiting. No add-on fees.
All plans include SMS OTP, Email OTP, Magic Links, Email + Password (Argon2id), OAuth (Google, GitHub, Apple), and TOTP/MFA with backup codes.
Yes. All plans support BYOT (Bring Your Own Twilio). We also have built-in Twilio with SNS failover for bulletproof delivery.
Yes. @auth1/react and @auth1/js are included in every plan. Drop-in components with dark/light themes, fully customizable.
Yes. Full source code available. Deploy with Docker, Kubernetes, or directly on AWS. Enterprise plan includes support for self-hosted deployments.
Business and Enterprise plans can sign webhooks with ML-DSA-65 (Dilithium), a NIST-standardized post-quantum signature algorithm. Future-proof your integrations.
8 companies already run their auth on Auth1. You can be live in 5 minutes.
14-day free trial • No credit card required • Cancel anytime