Authgear

Overview

Authgear is an identity platform for teams building web and mobile applications that need sign-in and account administration in one service. It is particularly suitable for developers who need many authentication choices, cross-application SSO and the option to run the software themselves. The main trade-off is that the less expensive plans restrict applications, administrator seats and log retention.

Authgear describes its software as open source, allowing organizations to self-host, migrate or move to another OIDC-compliant provider. Its hosted service runs in the USA on Google Cloud Platform data-center infrastructure. The company states that it is ISO 27001 and SOC 2 Type II compliant. A 30-day money-back guarantee applies to any SaaS plan.

Key features

Authentication and identity providers

Users can sign in with email, phone, username or password, as well as OTP codes and magic links. Google, Apple and Azure Active Directory are supported identity providers. Passkeys and mobile biometric login provide passwordless options, while multi-factor authentication can use SMS or email verification or a TOTP authenticator app. This breadth suits both consumer products and workforce authentication, although metered messaging on paid plans makes high-volume SMS or WhatsApp verification a cost to budget.

SSO and account administration

Single sign-on covers multiple web and mobile applications, with SAML SSO for web applications. The management portal includes password resets, account locking, scheduled deletion or anonymization and profile management. These controls reduce the need to build routine account operations, but the number of applications and administrator seats depends heavily on the plan.

Developer access and integrations

Official SDKs target React, React Native, Ionic, native Android, iOS and Flutter. OAuth 2.0/OpenID Connect, Admin, User Import and User Export APIs provide integration and migration paths. Listed integrations include Google Workspace, Microsoft 365, Mailchimp, Mailgun, Postmark, Salesforce, SendGrid, Slack, Telegram, WhatsApp and Zapier. The combination is useful for teams supporting several application stacks or connecting identity events to business systems.

Pricing

Authgear uses a freemium model. The Free plan costs nothing, billed $0 per month. It includes unlimited MAUs, 100 SMS/WhatsApp messages, two applications, two admin seats, one day of log retention and community support. It is a practical way to support a small deployment, but the two-application cap and extremely short log-retention window limit it for organizations needing broader estates or meaningful operational history.

Developers costs $50 a month, billed $50 per month. It keeps unlimited MAUs, two applications, two admin seats and one day of log retention, changes messaging to metered SMS/WhatsApp and adds priority email support. This is the sensible step up when support responsiveness matters; it does not expand the core application, seat or retention limits.

Business costs $500 a month, billed $500 per month. It includes 25,000 MAUs, with an additional $50 per 5k MAUs, metered SMS/WhatsApp, five applications, five admin seats, 60 days of log retention and a dedicated Slack channel. The larger application and seat allowances and longer retention make it better suited to a growing multi-app organization, while usage-based MAU and messaging charges require monitoring.

Enterprise uses custom pricing and adds volume discount, data residency, a custom SMS gateway, a tailored SLA and a dedicated account manager. It is the appropriate tier when deployment requirements or service commitments exceed the fixed plans.

Platforms

Authgear supports Android, iOS and web applications, exposes APIs, and can be self-hosted as well as used as a hosted service. The mobile SDK coverage is broad, spanning native and cross-platform frameworks. Self-hosting is a meaningful advantage for teams that need deployment control or an exit from a hosted identity provider; hosted service data is currently in the USA, so organizations with residency requirements should consider Enterprise.

Who it's for

Authgear fits product teams that need consumer or workforce authentication, passkeys, MFA, SSO and user administration without assembling each component separately. It is also a strong match for developers who value open-source portability and multiple SDKs. It is less compelling for a tiny single-app project that needs long log retention, or for a rapidly expanding application portfolio that would outgrow the two-app limits before reaching Business.

Pros and cons

Pros

• Wide sign-in coverage: passwords, OTP, magic links, passkeys, biometrics and MFA support varied user and security requirements.
• Portable deployment: open-source code and self-hosting support reduce dependence on one hosted provider.
• Strong integration surface: SDKs, standards-based APIs and numerous business integrations shorten implementation work.
• Useful SSO and lifecycle controls: multi-application SSO, SAML and account-management tools address both product and workforce scenarios.

Cons

• Small lower-tier footprint: Free and Developers each allow only two applications and two admin seats.
• Minimal retention on entry plans: one day of logs provides little history for investigation or operations.
• Variable messaging costs: Developers and Business meter SMS/WhatsApp usage.
• Hosted residency constraint: the hosted service is currently in the USA; other residency needs require Enterprise.

Alternatives

Choose miniOrange Identity and Access Management instead if its broader platform coverage and free Customer IAM tier with two to three social logins better match your deployment.

FusionAuth is the alternative to consider when a free self-hosted Community plan and unlimited users are the priority.

Pick Okta Customer Identity Cloud if a managed offering with up to 500 monthly active users on its $35 a month Essentials plan is a closer fit.

cidaas suits readers seeking a 30-day trial tier with 500 registered users and core authentication functions.

Consider Google Cloud Identity when enterprise security features and automated provisioning at $6 a month billed annually are the deciding factors.

Ory is an option for teams evaluating a developer tier and a production plan priced at $770 a year.

Curity Identity Server is worth choosing when a free self-hosted Community plan with unlimited users and a complete OAuth Server is preferred.

Descope is an alternative with a Free Forever tier capped at 7,500 MAUs, 10 monthly active tenants and three SSO connections.

For broader category browsing, see Customer Identity and Access Management Software and Passkey Authentication Software.

Verdict

Authgear is a strong choice for development teams that want flexible authentication, SSO, user administration and a self-hosting escape route, backed by SDKs and standards-based APIs. Choose it for portability and breadth; look elsewhere if you need more than two applications on a low-cost plan, longer entry-level log retention or hosted data residency outside the USA.