Freedom251 › Multi-Factor Authentication Software
Authelia

What Authelia is
Authelia is an open-source authentication and authorization server and portal for adding multi-factor authentication and single sign-on to applications. It is an OpenID Connect 1.0 Provider and is OpenID Certified. Authentication options include usernames and passwords, one-time passwords, FIDO2 WebAuthn security keys, passkeys, and Duo mobile; passwordless access is supported. Administrators can set policies for which users and groups may reach particular resources or domains. Users can reset LDAP or internal passwords in the web interface after email validation. Deployment options documented by the project include Docker, Kubernetes, and bare metal. Proxy integrations include Caddy, Envoy, HAProxy, NGINX, SWAG, Skipper, and Traefik, while the application directory includes 1Password, GitLab, Grafana, Home Assistant, and Nextcloud. The plan is free, with an Apache 2.0 license and no monetization model. The project is maintained by open-source developers in their free time and accepts voluntary contributions of money or time.
Who it suits
Authelia suits administrators who want to add authentication, single sign-on, and resource access policies to applications they operate. Its documented deployments and proxy integrations give teams several listed ways to fit it into a self-hosted environment.
What it does well
- OpenID Connect 1.0 Provider and OpenID Certified
- Supports passkeys, WebAuthn keys, and one-time passwords
- Policies control access by user and group
- Offers Docker, Kubernetes, and bare-metal deployment
What to know first
- No adaptive access
- Maintained by developers in their free time
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Authelia | Open-source Apache 2.0 licensed · No monetization model | Free |
As authelia.com lists them, read 9 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the Authelia website.
- Choose Docker, Kubernetes, or bare-metal deployment.
- Connect applications using a documented proxy integration or application integration.
- Configure authentication factors and authorization policies.
Verdict
Authelia combines several authentication methods with policy-based access control and password resets. Its free, open-source offering is aimed at teams prepared to deploy and maintain the service themselves.
Questions
How much does Authelia cost?
The Authelia plan is free. The project states that it has no monetization model.
Is Authelia open source?
Yes. It is open-source software under the Apache 2.0 license.
Which authentication methods does it support?
Listed methods include username and password, TOTP, FIDO2 WebAuthn security keys, passkeys, and Duo mobile. Passwordless authentication is supported.
Where can Authelia be deployed?
Documented methods are Docker, Kubernetes, and bare metal. Its listed platforms also include Linux, self-hosted, web, and API.
What integrations are available?
Documented proxy integrations include Caddy, Envoy, HAProxy, NGINX, SWAG, Skipper, and Traefik. The application directory includes 1Password, GitLab, Grafana, Home Assistant, and Nextcloud.
Facts from Authelia's own pages
- Access control
- Authorization policies let administrators control which users and groups can access specific resources or domains. · authelia.com, 9 Oct 2026
- Application integrations
- The integration directory includes applications such as 1Password, GitLab, Grafana, Home Assistant, and Nextcloud. · authelia.com, 9 Oct 2026
- Authentication
- It supports passkeys, one-time passwords, mobile push notifications, and WebAuthn as authentication methods. · authelia.com, 9 Oct 2026
- Deployment
- The documented deployment methods are Docker, Kubernetes, and bare metal. · authelia.com, 9 Oct 2026
- Identity protocol
- Authelia is an OpenID Connect 1.0 Provider and is OpenID Certified. · authelia.com, 9 Oct 2026
- Monetization
- The project states that it has no monetization model and accepts voluntary financial or time contributions. · authelia.com, 9 Oct 2026
- Password reset
- Users can reset LDAP or internal passwords through the web interface using email validation. · authelia.com, 9 Oct 2026
- Project status
- Authelia is maintained by open-source developers in their free time and is not a company or incorporated entity. · authelia.com, 9 Oct 2026
- Proxy integrations
- The integration documentation lists Caddy, Envoy, HAProxy, NGINX, SWAG, Skipper, and Traefik among supported proxies. · authelia.com, 9 Oct 2026
- Purpose
- Authelia is an open-source authentication and authorization server and portal providing multi-factor authentication and single sign-on for applications. · authelia.com, 9 Oct 2026
- Security reporting
- Authelia follows coordinated vulnerability disclosure and asks reporters to contact the project privately about vulnerabilities. · authelia.com, 9 Oct 2026
- Support
- The project asks users to consult its documentation and provides contact options for security vulnerability reports. · authelia.com, 9 Oct 2026
Where Authelia stands on Freedom251
- Multi-Factor Authentication Software#1 of 52
- Authentication Software#2 of 31
- Single Sign-On Software#3 of 34
- OAuth Server Software#7 of 32
