README

Auth that lives inside your app. Composable, plugin-based, and built to scale — powering from weekend projects to the biggest consumer and enterprise apps on the planet.

npx auth init

Trusted By

OpenAI

databricks

strapi

OpenAI

databricks

strapi

Features

Works with your stack.

Next.js, Nuxt, SvelteKit, Astro, Hono, and 20+ more.

+14

Built-in credential auth.

Sessions, email verification, and password reset included.

user@email.com

••••••••

Social sign-on.

Google, GitHub, Apple, Discord, and more.

+34

Multi-tenancy built in.

Teams, roles, invitations, and access control.

owneradminmember

Enterprise ready.

SSO, SAML 2.0, SCIM, and directory sync.

50+ and growing.

Passkeys, magic links, API keys, JWTs, and more.

passkeys2famagic-linkjwtapi-keysanonymousoidcotpbearermulti-session

Auth for AI agents.

MCP auth, token exchange, and agent delegation.

$agent.auth()→sk-••••✓

Security & observability.

Bot detection, IP blocking, and email validation.

Manage users, sessions, and organizations.

10:50 AMJohncreated a session

10:48 AMSarahupdated profile

10:45 AMAlexjoined organization

10:42 AMEmmarevoked token

10:38 AMMikeenabled 2FA

10:50 AMJohncreated a session

10:48 AMSarahupdated profile

10:45 AMAlexjoined organization

10:42 AMEmmarevoked token

10:38 AMMikeenabled 2FA

++++

Framework

The most comprehensive authentication framework for TypeScript.

auth.ts

import { betterAuth } from "better-auth"

export const auth = betterAuth({
  emailAndPassword: {
    enabled: true,
  },
  socialProviders: {
    google: {
      clientId: process.env.GOOGLE_CLIENT_ID!,
      clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
    },
    github: {
      clientId: process.env.GITHUB_CLIENT_ID!,
      clientSecret: process.env.GITHUB_CLIENT_SECRET!,
    },
  },
  plugins: [
    twoFactor(),
    passkey(),
    organization(),
  ],
})

import { betterAuth } from "better-auth"export const auth = betterAuth({  emailAndPassword: {    enabled: true,  },  socialProviders: {    google: {      clientId: process.env.GOOGLE_CLIENT_ID!,      clientSecret: process.env.GOOGLE_CLIENT_SECRET!,    },    github: {      clientId: process.env.GITHUB_CLIENT_ID!,      clientSecret: process.env.GITHUB_CLIENT_SECRET!,    },  },  plugins: [    twoFactor(),    passkey(),    organization(),  ],})

No dashboard clicks. Your auth lives in code — version controlled, type-safe, and reviewable in PRs.

Plugin Ecosystembrowse all →

Two FactorAuthenticationPasskeyAuthenticationMagic LinkAuthenticationEmail OTPAuthenticationUsernameAuthenticationOne TapAuthenticationPhone NumberAuthenticationAnonymousAuthenticationBearerAuthenticationGeneric OAuthAuthenticationOne Time TokenAuthenticationSIWEAuthenticationOrganizationOrganizationAdminOrganizationMulti SessionOrganizationAPI KeyOrganizationSSOEnterpriseTwo FactorAuthenticationPasskeyAuthenticationMagic LinkAuthenticationEmail OTPAuthenticationUsernameAuthenticationOne TapAuthenticationPhone NumberAuthenticationAnonymousAuthenticationBearerAuthenticationGeneric OAuthAuthenticationOne Time TokenAuthenticationSIWEAuthenticationOrganizationOrganizationAdminOrganizationMulti SessionOrganizationAPI KeyOrganizationSSOEnterprise

OIDC ProviderEnterpriseSCIMEnterpriseOAuth ProxyEnterpriseJWTSecurityHIBPSecurityCaptchaSecurityStripeIntegrationPolarIntegrationOpen APIIntegrationDubIntegrationAutumnIntegrationDodo PaymentsIntegrationCreemIntegrationMCPAIDevice AuthAuthenticationLast LoginAuthenticationOIDC ProviderEnterpriseSCIMEnterpriseOAuth ProxyEnterpriseJWTSecurityHIBPSecurityCaptchaSecurityStripeIntegrationPolarIntegrationOpen APIIntegrationDubIntegrationAutumnIntegrationDodo PaymentsIntegrationCreemIntegrationMCPAIDevice AuthAuthenticationLast LoginAuthentication

Infrastructure

Connect to our infrastructure and power your self-hosted Better Auth with a dashboard, audit logs, security detection, enterprise features, and more.

dash.better-auth.com

OverviewUsersOrgsEvents