Skip to content
SPECIFICTION
Get listed

Auth0 Guardian

auth0.com

From $35/mo Free plan iOSAndroid
Visit auth0.com
Spec score 8.6 #3 of 23 in Self-Service Password Reset Software

What it is

Auth0 Guardian is a mobile app for completing multi-factor authentication on iOS and Android. During login, users can approve a push notification on an enrolled device or enter a temporary one-time password. Guardian-generated OTPs normally remain valid for 30 seconds. The app supports multiple languages and dialects, follows the device language by default, and offers system, light, and dark themes. Users can protect it with a passcode, passphrase, or device biometrics. Organizations can use Guardian SDKs to build similar applications or add Guardian capabilities to their own apps. Push delivery can use AWS SNS, Firebase Cloud Messaging, or Apple Push Notification service. Auth0 MFA API endpoints can enforce MFA at token endpoints and manage enrolled factors. Guardian is available through the Apple App Store and Google Play Store. The free plan is available; paid plans start at 35 /mo, with a 22-day trial.

Spec sheet

Purpose
Auth0 Guardian is a mobile app for completing MFA with push notifications or temporary one-time passwords.Read 7 Oct 2026 · auth0.com
Free plan
YesRead 21 Sep 2026 · auth0.com
App security
Users can protect the app with a passcode or passphrase and device biometrics.Read 7 Oct 2026 · auth0.com
Availability
Users can download Guardian from the Apple App Store or Google Play Store.Read 7 Oct 2026 · auth0.com
Custom apps
Organizations can build Guardian-like applications or add Guardian capabilities to their own apps using Guardian SDKs.Read 7 Oct 2026 · auth0.com
Legacy guidance
Auth0 identifies the Guardian provider setting as a legacy option and recommends using the any provider setting in most cases.Read 7 Oct 2026 · support.auth0.com
Localization
The app supports multiple languages and dialects, and defaults to the device language.Read 7 Oct 2026 · auth0.com
MFA API
Auth0 MFA API endpoints can enforce MFA at token endpoints and enroll or manage MFA factors.Read 7 Oct 2026 · auth0.com
OTP codes
Guardian generates temporary OTPs, which are valid for 30 seconds by default.Read 7 Oct 2026 · auth0.com
Pricing context
Auth0's pricing page lists Pro Multi-Factor Authentication in the Essentials plan, shown at $35/ month, for up to 500 monthly active users.Read 7 Oct 2026 · auth0.com
Push approval
Users approve a push notification on an enrolled device to complete login.Read 7 Oct 2026 · auth0.com
Push approvals
YesRead 21 Sep 2026 · auth0.com
Push integrations
Push notifications can use AWS SNS, Firebase Cloud Messaging, or Apple Push Notification service.Read 7 Oct 2026 · auth0.com
SDK limitation
Guardian SDK custom apps do not support approving web login attempts when push notifications are disabled, and do not show login attempt details in a native-device dialog.Read 7 Oct 2026 · support.auth0.com
Supported platforms
iOS,AndroidRead 21 Sep 2026 · auth0.com
Themes
The iOS and Android apps support system, light, and dark themes.Read 7 Oct 2026 · auth0.com

Plans and prices

Free Free billed monthly 25,000 monthly active users · 1 custom domain · 5 organizations · 1 enterprise connection Read 21 Sep 2026 · auth0.com
Essentials $35 a month billed monthly 500 monthly active users · 10 organizations Read 21 Sep 2026 · auth0.com
Professional $240 a month billed monthly 500 monthly active users Read 21 Sep 2026 · auth0.com
Enterprise Price not published 99.99% SLA Read 21 Sep 2026 · auth0.com

Every Auth0 Guardian plan and price →

Strong points and limits

Strong points

  • Push approvals on enrolled devices
  • Temporary OTPs valid for 30 seconds
  • Passcode, passphrase, and biometric protection
  • Multiple languages and dialects
  • System, light, and dark themes

Limits

  • Custom SDK apps cannot approve web logins when push is disabled
  • SDK apps lack native login-attempt details
  • Guardian provider setting is marked legacy
  • Paid plans start at 35 /mo

Who it suits

It suits organizations needing mobile push approvals or temporary OTPs for MFA, and teams building custom applications with Guardian SDKs. It runs on iOS and Android.

Verdict

Guardian combines push-based MFA and short-lived OTPs in mobile apps, with SDK and API options for organizations. Its SDK restrictions and legacy provider guidance matter when planning an implementation.

Where Specifiction places it

Alternatives to Auth0 GuardianAll alternatives →