Authgear vs SuperTokens
Authgear
authgear.comSuperTokens
supertokens.comSide by side
| Figure | Authgear | SuperTokens |
|---|---|---|
| Price from | $50/mo | $0.01/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | Yes | Yes |
| Web | Yes | Yes |
| Linux | — | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 5 | 6 |
| Spec score · Multi-Factor Authentication APIs | 9.5 (#1) | 8.9 (#3) |
| Authentication methods | The product supports email, phone, username, passwords, OTPs, magic links, social login, passkeys, biometrics and MFA. | The platform supports email/password, passwordless magic links or OTPs, social login, passkeys, MFA, unified login, machine-to-machine authentication, and enterprise multitenancy. |
| Compliance | Authgear states that it is ISO 27001 and SOC 2 Type II compliant. | The pricing page lists SOC 2 compliance among the core features. |
| Integrations | Listed integrations include Google Workspace, Microsoft 365, Mailchimp, Mailgun, Postmark, Salesforce, SendGrid, Slack, Telegram, WhatsApp and Zapier. | The homepage lists support for JavaScript, Go, Python, React, Angular, Vue, Android, Flutter, and iOS, and says it works with more than 25 frameworks. |
| Rating on G2 | 4.5 out of 5 from 1 review. | 5.0 out of 5 from 1 review. |
| SDKs | Official integration guides cover JavaScript, React, Vue, Angular, iOS, Android, React Native, Flutter, Capacitor and Xamarin. | Official backend SDKs are provided for Node.js, Python, and Go, with frontend SDKs for React, vanilla JavaScript, React Native, iOS, Flutter, and Android. |
| Security controls | Documented controls include audit logs, brute-force protection, bot protection, smart account lockout, password policies and rate limits. | Session cookies are generated with the Secure flag, and the security documentation describes token and cookie protections. |
| Self-hosting | Authgear can run self-hosted or in a customer VPC, and documentation provides a self-deployed setup path. | SuperTokens Core can be deployed on the customer’s infrastructure with the customer’s database, while the managed service handles scaling, reliability, and updates. |
| Support | The pricing page lists community support for Free, priority email support for Developers, a dedicated Slack channel for Business and a dedicated account manager for Enterprise. | Professional support can include migration and implementation assistance, several support channels, and guaranteed response times from 2 hours to 2 days. |
| What it does | Authgear is an identity-as-a-service platform for authentication and user management in web and mobile applications. | SuperTokens provides open-source authentication and session management that runs through an application backend and can be self-hosted or consumed as a managed service. |
Plans
Authgear
- FreeFree
- FreeFree
- Developers$50 a month
- Business$500 a month
- EnterprisePriced on request
SuperTokens
- Self-hostedFree
- Self-hosted open sourceFree
- Account Linking add-on$0.01 a month
- Multi-factor authentication add-on$0.01 a month
- Cloud$0.02 a month
- Dashboard users$20 a month
In their own words
Authgear
Authgear is an identity-as-a-service platform for authentication and user management in web and mobile applications. It supports sign-in with email, phone, username, password, one-time codes and magic links, along with mobile biometrics, passkeys and multi-factor authentication through SMS, email or TOTP apps. Identity provider options include Google, Apple and Azure Active Directory. It offers single sign-on across web and mobile applications, including SAML SSO for web apps.
Its user-management portal supports password resets, account locking, profile management and scheduled deletion or anonymization. Developers can use SDKs for React, React Native, Ionic, native Android, iOS and Flutter, as well as OAuth 2.0/OpenID Connect and Admin, User Import and User Export APIs. Authgear describes itself as open source and supports self-hosting; its hosted service is currently in the USA on Google Cloud Platform infrastructure. Plans include a free tier and paid service from $50/mo. The free tier includes two applications, two admin seats, one-day log retention and community support.
SuperTokens
SuperTokens is an open-source authentication provider for developers adding sign-in and session management to applications. It supports email and password, passwordless email or SMS codes, magic links, social login, and passkeys. Enterprise options include tenant-specific login methods, separate user pools, and enterprise SSO. Developers can adapt the prebuilt interface and add logic before or after API operations with hooks and overrides. Backend SDKs communicate with SuperTokens Core; frontend SDKs call authentication routes exposed by the application backend. Core can be self-hosted, with open-source features free at any scale and no MAU limit. A managed Cloud plan is also available, free under 5K MAUs and then $0.02 per MAU. Other paid or sales-led features include multi-tenancy, cross-domain unified login, machine-to-machine authentication, availability zones with uptime SLAs, and Attack Protection Suite. That suite can detect risky authentication activity and prompt extra verification or block attempts. Integrations include Next.js, NestJS, GraphQL, Capacitor, AWS Lambda, Vercel, Hasura, and Supabase. SuperTokens says it is SOC 2 compliant and describes more than 100 controls and tests.