Sign in
with a touch.

Passkeys and email links for your team, and one sign-in across the apps you link.

100% free, open source alternative to Auth0, Okta and Microsoft Entra

Run Auth Read the docs

Invite
Priya Shahpriya@example.comInvited
Touch
Continue with a passkey
Signed in
wiki.example.comActive
crm.example.comActive

Passkeys

Passkeys for everyone.

Each person confirms their email once, then registers a passkey. Administrators always sign in with one.

Registered passkeys

Passkey 1Added Oct 2Last used Oct 16

Passkey 2Added Oct 9Not used yet

Your apps

One sign-in for your apps.

Approve an app and your team signs in to it with Auth. Sign out everywhere reaches every app you linked.

wiki.example.comApproved hereActive

crm.example.comCreated with a link tokenActive

People

Everyone in one place.

Invite people, allow your company's domain and suspend access from one list.

PSPriya ShahOwnerActive

MRMarcus ReedAdministratorActive

SLSam LeeMemberInvited

example.com

Move in

Bring your team across.

Stage a user export from Google Workspace, Microsoft Entra, Auth0, Okta or JumpCloud, review it, then admit people as invitations.

Stage an export

users.csv

Admit selected

100% free

100% free.

Free as in code, free as in cost. MIT licensed, nothing to pay.

MIT License

Ownership

Yours, start to finish.

Run Auth on your own computer. Your people, passkeys and apps stay in your installation, and export with you.

$ git clone https://github.com/just-every/run-auth.git
$ cd run-auth
$ node scripts/rer.mjs install
$ node scripts/rer.mjs setup --owner-email you@example.com
$ node scripts/rer.mjs dev

Also included

The quiet details.

Passkey recovery
Another administrator approves, or a notified 72-hour delay passes.
Sign out everywhere
End every session in every linked app.
Activity
Every account and issuer event, recorded.
Required providers
Require Google, Microsoft or Okta for a domain.
Agent proposals
An agent prepares a change; a person approves it with a passkey.
Export and import
People, apps and a signed grant map move with you.

Welcome everyone in.

Run Auth on your own computer, register a passkey and link your first app.