Better Auth

Implement self-hosted authentication, multi-tenancy, and social sign-on into TypeScript web applications

Pricing model

Free Tier, Paid

Rating

★ People love it

Time to value

Quick Setup (< 1 hour)

You can use Better Auth to add authentication and user management directly to your TypeScript applications. It runs inside your own backend codebase and connects to your database without requiring external hosted user stores. You can configure credential sign-ins, two-factor verification, passkeys, and social logins with providers like Google and GitHub. The framework also supports team invitations, role-based access control, enterprise single sign-on, and security protections like rate limiting and bot detection, keeping all your authentication logic fully typed and version controlled.

What Better Auth does

Configure OAuth credentials for third-party providersGenerate database schemas for users and active sessionsImplement two-factor authentication via authenticator appsManage team memberships and assign granular user permissionsSet up magic link and one-time password email flowsInspect audit logs and track session security eventsConfigure rate limiting rules to block suspicious IP addressesTypeScript-first configuration defined entirely in codeBuilt-in credential authentication with email verification and password resetsSupport for social sign-on across more than 30 identity providersMulti-tenancy system with organizations, team invitations, and custom rolesModern login methods including passkeys, magic links, email OTP, and phone verificationEnterprise features including SAML 2.0, SCIM directory sync, and OAuth proxyReal-time threat mitigation covering bot detection, IP blocking, and rate limitingAuthentication support for AI agents through Model Context Protocol (MCP)