Passkeys & social login
Google, GitHub, Apple, and phishing-resistant passkeys in one prompt. Passwordless is the default, not an add-on.
$ AUTH PLATFORM
Authentication you'll never build again
Login, SSO, MFA, passkeys, and a full user directory behind a few lines of code. We handle sessions, token rotation, and the security patches — so your team ships features instead of rebuilding auth for the third time.
QUICKSTART
From npm install to a login screen
Wrap your app in one provider and you get hosted login, session handling, and MFA out of the box. No token plumbing, no password tables to secure.
App.tsx
import { Auth } from "@identity/react";
// Wrap your app once — sessions, refresh, and MFA are handled for you
export function App() {
return (
<Auth.Provider domain="acme.identity.dev">
<Auth.SignedIn>
<Dashboard />
</Auth.SignedIn>
<Auth.SignedOut>
{/* Hosted login with social, passkeys, and SSO built in */}
<Auth.LoginButton providers={["google", "github", "passkey"]} />
</Auth.SignedOut>
</Auth.Provider>
);
}$ npm i @identity/react && identity init
FEATURES
Every way your users sign in
The whole identity surface — the parts that are risky to build yourself — maintained and audited for you. Each piece works on its own and better together.
Enterprise SSO
SAML and OIDC connections your customers configure themselves. Close the B2B deal without a custom integration each time.
Roles & permissions
Model organizations, teams, and fine-grained permissions once. Enforce them on the client and in your API with the same claims.
Lifecycle webhooks
React to sign-up, login, and profile changes in real time — sync users to your CRM or provision resources on the fly.
Adaptive MFA
Step-up authentication only when risk is high — new device, odd location, sensitive action. Friction where it counts, nowhere else.
User directory
A searchable, exportable directory of every user and organization, with SCIM provisioning for enterprise accounts.
IN PRODUCTION
Guarding logins at every scale
From a founder's first sign-up screen to a platform team protecting millions of sessions — the same identity layer runs everywhere.
SECURITY
Security we maintain, so you don't have to
Auth is the one part of your app attackers probe first. We keep it patched, monitored, and compliant while you build everything else.
Sessions and tokens, handled
Short-lived tokens with silent refresh, secure cookie handling, and revocation on demand. You never store a password or rotate a key by hand.
Attacks blocked before they land
Bot detection, breached-password checks, and rate limiting run on every attempt. Brute-force and credential-stuffing are stopped at the door.
Compliant out of the box
SOC 2 and GDPR-ready infrastructure with audit logs and data residency options — the evidence your enterprise buyers ask for.
PRICING
Priced per active user, not per feature
Start free and pay as your user base grows. MFA, passkeys, and roles are included on every plan — no security paywall.
Free
For side projects and early prototypes.
$0/ forever
- 10,000 monthly active users
- Social & email login
- Passkeys
- Community support
Pro
For production apps that need real security.
$99/ per month
- 50,000 monthly active users
- MFA & adaptive risk
- Custom login domain & branding
- Roles & permissions
- Email support (24h)
Enterprise
For B2B products selling into IT teams.
$299/ per month
- Everything in Pro
- SAML & OIDC SSO
- SCIM user provisioning
- Audit logs & data residency
- Priority support (4h)
FAQ
Questions, answered
Yes. Bulk-import users with their hashed passwords in most common formats, or migrate lazily on first login so no one has to reset. We verify the old hash, then re-hash to our standard transparently.
Add secure login to your app today
Free to start, no credit card. Go from empty project to a working login screen in under five minutes.