Best Free Authentication Software - Page 2

Compare the Top Free Authentication Software as of November 2026 - Page 2

  • 1
    HMDIA Login & Registration
    HMDIA Login & Registration is a WordPress plugin for creating branded login, registration, password-reset, account, and contact pages without custom coding. Its free version includes customizable forms and email templates, registration email verification, admin approval, email OTP two-factor authentication, password policies, access controls, and spam protection with a honeypot, Cloudflare Turnstile, or Google reCAPTCHA. Pro adds Google Sign-In, passwordless email-code, magic-link, and passkey sign-in, authenticator-app and passkey two-factor authentication, SMS OTP, recovery codes, session management, temporary access, role-based redirects, advanced fields, user management, and webhooks. SMS verification uses Twilio. Optional add-ons provide additional features and integrations. A setup wizard, online documentation, and video tutorials help WordPress site owners configure forms and authentication settings.
    Starting Price: $0
  • 2
    Edgenexus Load Balancer (ADC/WAF/GSLB)
    Choose us because we offer the easiest to use technology without sacrificing features or performance. We back this up with outstanding support and care, delivered under a fair and cost effective pricing model Our technology is used by the smallest startups with big ideas and small budgets all the way to global enterprises and anything in between. We love them all the same! Easy to use Load balancing, WAF, GSLB and SSO/Pre-Authentication. It is also the Only true ADP Application Delivery Platform where the functionality and lifespan can be enhanced using the app store or applications that you develop in house.
    Starting Price: $50
  • 3
    Konfirmi

    Konfirmi

    Konfirmi

    Konfirmi gives your website or app easy-to-setup verification (which you can combine or use standalone). Verification methods include: - 2 Factor Authentication / Multi Factor Authentication (2FA/MFA) - SMS/Email verification - True age verification (KBA Checks) - True customer name/address/info verification (KBA Checks) - Biometric Authentication - Single Sign On (SSO). Check age, addresses, photo IDs, more. Quickly add to any website or application. Comply with various USA and other laws. Small Business and Enterprise options. Konfirmi‘s patent-pending system allows you to automatically verify your customer’s information, including age, physical address, email address, phone number, and photo ID in any app, user sign up or registration page, e-commerce store, contact form or survey, or other web-facing system. Quickly start using Konfirmi in your website or application.
    Starting Price: $19
  • 4
    ThumbSignIn

    ThumbSignIn

    ThumbSignIn

    Any channel, any device – we’ve got you covered. Choose from our suite of user-friendly authentication solutions, from 2FA to passwordless biometrics, to find the right authentication for your business and users. Start with 2FA and progress to more advanced technology like biometrics-based authentication to continue improving user experience and security over time. Our SaaS-based authentication service, REST APIs , mobile SDKs and UI widgets deliver a powerful combination of software components that can be used to build omni-channel authentication experiences that span mobile, web, phone, IoT, chatbots, kiosks, physical access and more. It’s time to take the security burden off of users! Our mission is to democratize access to strong authentication technology and make the digital world safer for everyone. ThumbSignIn provides cost-effective, scalable SaaS-based solutions to help companies select the best way to strengthen their existing systems with two-factor authentication (2FA).
    Starting Price: $3 per user per month
  • 5
    Civic

    Civic

    Civic Technologies

    Civic is redefining how teams sign in and get work done with its two core solutions: Civic Auth and Civic Nexus. Civic Auth delivers a simple, secure sign-in experience that works across apps, servers, and assistants, combining Web2 ease with Web3 readiness. Civic Nexus unifies data, SaaS apps, and AI tools into intelligent workflows that automate everything from simple tasks to complex business processes. Together, they create a foundation of trust and efficiency, reducing friction at every step. Developers can integrate Civic with a 5-minute SDK setup and flexible prompts. The result is faster onboarding, safer authentication, and smarter automation for modern teams.
    Starting Price: $37.50 per month
  • 6
    Appwrite

    Appwrite

    Appwrite

    Build your entire backend within minutes with just a few lines of code using the frameworks and languages you love. Allowing you to focus on design and innovation instead of tedious and repetitive backend tasks. Products Appwrite Cloud provides you with: - Authentication: 30+ login methods, support for teams, roles, and user labels - Databases: Never paused, fast in-memory caching, advanced permission models, relationships support - Storage: File encryption at rest and transit, built-in image transformation capabilities, advanced compression with WebP/Brotli support - Functions: Automatic deployment from GitHub - Messaging: SMS, email, and push notification support - Real-time: Unlimited subscriptions By utilizing Appwrites’ features, you save time and ensure your products are stable and secure for your end users. With Appwrite, you always own your data, so you never have to fear vendor lock-in.
    Starting Price: $15 per month, per member
  • 7
    Authgear

    Authgear

    Oursky

    Authgear is a highly customizable authentication solution to help businesses better manage their users, mitigate fraud, alleviate password fatigue, and accelerate development team's timeline. It offers a simple, secure, and scalable solution for developers to easily integrate 2FA, Session Management, Magic-link, Biometric, Social Login, and other security features into their own apps within a few minutes. In addition, Authgear also has an Admin Portal for developers and IT support to manage user access, user sessions, and analyze event logs.
    Starting Price: $100 / month
  • 8
    System Locker

    System Locker

    System Locker

    Control the access and distribution of your software product. With dozens of features, flexibility is maximized: you can create short term access keys, notify users when updates are available, view access logs and even give resellers the ability to purchase new keys without contacting you. Choose from registration-required or key-only authentication for each application. If key-only is your preference, your users will appreciate the speed. If you require users to register an account on System Locker, they can choose between verifying their email or verifying their Discord account. Our dedication to reliability remains strong, even as hundreds of new users join every day.
    Starting Price: $10/year
  • 9
    BotDelive

    BotDelive

    BotDelive

    BotDelive is a 2FA and push notification service via IM bots for developers. Create an account on BotDelive and get your API credentials. Read our API documentation and start integrating! You will need only 2 API endpoints to integrate 2FA. BotDelive is a cloud communication platform for developers. It allows developers to send and receive 2FA and push notifications over the chat apps by using its APIs. Normally, you have to force your user to install an app to send notifications. But, the chat apps are already installed on millions of devices. Why not use them? BotDelive offers a quick way of 2FA. With only answering the yes/no questions your users can authorize their own accounts. Authenticate users via BotDelive instead of e-mail and password. You can require only once the password and then BotDelive will handle all requests for you. Send important push notifications via chat apps. BotDelive ID is reliable.
    Starting Price: Free
  • 10
    Sima

    Sima

    Active Witness

    Sima does more than just keep the bad guys out. Sima is a highly secure yet frictionless cloud-based Access Control reader. Sima has the ability to read both mobile credentials (QR codes) and facial biometrics. This allows the integrated cloud-based software to issue both single (QR only) and multi-factor (facial verification) for highly secure and customized facility access. We take your privacy very seriously. We use facial recognition technology to perform facial authentication. This allows us to verify identity and grant access to a location. Facial data will be stored on our servers only for the purpose of identification. Your personal data, including your face picture, will not be shared with third parties.
    Starting Price: Free
  • 11
    Aserto

    Aserto

    Aserto

    Aserto helps developers build secure applications. It makes it easy to add fine-grained, policy-based, real-time access control to your applications and APIs.
 Aserto handles all the heavy lifting required to achieve secure, scalable, high-performance access management. It offers blazing-fast authorization of a local library coupled with a centralized control plane for managing policies, user attributes, relationship data, and decision logs. And it comes with everything you need to implement RBAC or fine-grained authorization models, such as ABAC, and ReBAC. Take a look at our open-source projects: - Topaz.sh: a standalone authorizer you can deploy in your environment to add fine-grained access control to your applications. Topaz lets you combine OPA policies with Zanzibar’s data model for complete flexibility. - OpenPolicyContainers.com (OPCR) secures OPA policies across the lifecycle by adding the ability to tag, ver
    Starting Price: $0
  • 12
    Oso Cloud
    Customers want features that you can’t build without a refactor. Your code is hand-rolled, fragile and hard to debug. It’s spread throughout the codebase and relies on data from multiple sources. There’s no one place to see who has access to what, that authorization is working, or why requests are or are not authorized. Lay out who's allowed to do what in Workbench, our visual rules editor Start with primitives for common patterns like multi-tenancy and RBAC Extend your logic with custom rules in Polar, our configuration language for authorization. Send core authorization data, like roles and permissions. Make authorization checks and filter lists based on authorization where you used to have IF statements and custom SQL.
    Starting Price: $149 per month
  • 13
    MonoCloud

    MonoCloud

    MonoCloud

    MonoCloud is a developer-focused platform designed to streamline authentication, authorization, and user management for applications across multiple environments, including web, mobile, IoT devices, and more. It enables developers to easily integrate secure and customizable login processes, supporting a range of authentication methods such as passwords, magic links, one-time passcodes, and social logins like Google, Facebook, and Apple. Built with a strong emphasis on reducing user friction, MonoCloud offers a branded and smooth authentication experience. The platform includes advanced features such as mutual TLS, brute-force protection, and global session management, making it a comprehensive solution for handling user access across various applications and devices. In addition, MonoCloud is designed with developers in mind, providing extensive documentation, integration guides, and support for various front-end and back-end frameworks.
    Starting Price: $0
  • 14
    PropelAuth

    PropelAuth

    PropelAuth

    Easy integration and straightforward APIs for developers. Built-in user management for customer-facing teams. Data and insights for PMs and executives. PropelAuth was founded on the idea that a great auth product gets out of your way. We provide you with the right tools out of the box, so you can quickly make your users' experiences as secure and smooth as possible. As soon as you start onboarding users, your team will have a laundry list of things they need to do or see. Organizations are a first-class concept in PropelAuth. You can use our UIs to get started quickly or build your own with our APIs. Start with our default roles, or create your own. We even handle updating existing users when you make changes. The easiest way to integrate with identity providers, like Okta and Azure AD. We provide guides for your users to set up and test their configuration. Set custom session durations per organization, enforce MFA, and more. We handle the complexity so you don't have to.
    Starting Price: $150 per month
  • 15
    ZITADEL

    ZITADEL

    ZITADEL

    ZITADEL is an open-source identity and access management platform designed to simplify authentication and authorization for applications. It offers a comprehensive suite of features, including customizable hosted login pages, support for modern authentication methods such as Single Sign-On (SSO) and social logins, and enforcement of multifactor authentication to enhance security. Developers can integrate authentication directly into their applications using ZITADEL's APIs or build dedicated login interfaces. The platform supports role-based access control, allowing for precise permission assignments based on user roles, and is inherently multi-tenant, facilitating easy extension of applications to new organizations. ZITADEL's extensibility enables seamless adaptation to various workflows, user management processes, and brand guidelines, with features like ZITADEL Actions that execute workflows after predefined events without the need for additional code deployment.
    Starting Price: $100 per month
  • 16
    NextAuth.js

    NextAuth.js

    NextAuth.js

    NextAuth.js is an open source authentication solution tailored for Next.js applications, offering seamless integration with popular services like Google, Facebook, Auth0, and Apple. It supports various authentication methods, including OAuth 1.0 & 2.0, email/passwordless sign-ins, and custom username/password systems. Designed for flexibility, NextAuth.js operates efficiently in serverless environments and supports multiple databases such as MySQL, PostgreSQL, MSSQL, and MongoDB, allowing developers to choose between database sessions or JSON Web Tokens (JWT). Security features include signed, prefixed, server-only cookies, HTTP POST with CSRF token validation, and encrypted JWTs using JWS/JWE/JWK standards. The platform facilitates easy setup, enabling developers to add authentication in minutes with minimal configuration. Comprehensive documentation and a supportive community further enhance its accessibility for developers seeking a robust authentication system.
    Starting Price: Free
  • 17
    Auth.js

    Auth.js

    Auth.js

    Auth.js is an open-source authentication library designed to integrate seamlessly with modern JavaScript frameworks, providing a flexible and secure authentication experience. It supports various authentication methods, including OAuth (e.g., Google, GitHub), credentials, and WebAuthn, allowing developers to choose the most suitable approach for their applications. Auth.js is compatible with multiple frameworks, such as Next.js, SvelteKit, Express, Qwik, and SolidStart, enabling developers to implement authentication across different platforms. The library offers built-in support for popular databases like Prisma, Drizzle ORM, Supabase, Firebase, and TypeORM, facilitating user data management. Security features include signed cookies, CSRF token validation, and encrypted JSON Web Tokens (JWTs), ensuring robust protection for user data. Auth.js is designed to operate efficiently in serverless environments and provides comprehensive documentation and examples.
    Starting Price: Free
  • 18
    Zoho Directory
    Zoho Directory is a cloud-based identity and access management platform designed to streamline authentication, authorization, and user management for organizations. It offers Single Sign-On (SSO) capabilities, allowing employees to access multiple applications with a single set of credentials, thereby enhancing security and user convenience. The platform supports Multi-Factor Authentication (MFA), adding an extra layer of protection against unauthorized access. Device authentication ensures secure access to both applications and devices, enabling employees to use the same credentials across platforms. Zoho Directory also provides robust provisioning features, allowing IT administrators to create and manage user profiles across various applications directly from the platform, reducing the time spent on repetitive tasks. Integration with existing directories, such as Microsoft Active Directory and Azure AD, is facilitated through directory stores.
    Starting Price: $1.70/user/month
  • 19
    FreeRADIUS

    FreeRADIUS

    FreeRADIUS

    ​FreeRADIUS is a high-performance, modular, and feature-rich open source RADIUS suite that includes a server, client library, development libraries, and numerous additional utilities. It is the most widely deployed RADIUS server globally, powering major Internet Service Providers and telecommunications companies, and serving as a key technology behind eduroam, the international Wi-Fi education roaming service. FreeRADIUS supports a comprehensive range of authentication protocols, including PAP, CHAP, and all EAP types such as EAP-TLS, EAP-TTLS, and EAP-PEAP with EAP-MSCHAP. Its modular design allows for flexible configurations, enabling conditional request processing, integration with LDAP and SQL databases, and execution of external scripts. It supports virtual servers, simplifying complex implementations and reducing maintenance costs. With support for over 100 vendor-specific attributes, FreeRADIUS ensures compatibility with a wide array of network access servers.
    Starting Price: Free
  • 20
    Proton Authenticator
    Proton Authenticator is a privacy-first two-factor authentication app that generates time-based one-time passwords to add an extra layer of login security for online accounts beyond just a password, so users can secure accounts across all their devices. It is open source and uses end-to-end encryption, meaning all cryptographic operations and secret keys are generated and stored locally, and even Proton cannot see your unencrypted 2FA data, offering transparency and strong privacy by design. Users can sync 2FA codes across devices with encrypted backups (including via iCloud or a Proton Account), import existing codes from other authenticator apps, and export them if needed, giving flexibility and control over 2FA secrets without vendor lock-in. Proton Authenticator is free to use, has no ads or tracking, and supports secure practices like biometric locks and offline access, so users can generate login codes.
    Starting Price: Free
  • 21
    Ente Auth
    Ente Auth is a free, open-source two-factor authentication app that helps users generate and manage time-based one-time passwords to secure logins for online accounts with an extra layer of verification beyond just a password, offering end-to-end encrypted backups so you never lose your codes and they remain private even to the service itself. It syncs codes across mobile, desktop, and web clients using fully encrypted channels, lets users import existing 2FA tokens by scanning QR codes or manual entry, and provides features like offline code generation, tagging and searching of codes, pinning favorites, icon identification, and quick “next code” display for faster logins. Backups are encrypted with audited cryptography, giving users peace of mind that only they can decrypt and access their 2FA secrets, and codes can be shared securely with teammates via encrypted links with optional expirations.
    Starting Price: Free
  • 22
    Aegis Authenticator

    Aegis Authenticator

    Beem Development

    Aegis Authenticator is a free, secure, open source Android app for managing two-factor authentication tokens, helping users add an extra layer of security to their online accounts by generating time-based or HMAC-based one-time codes (HOTP/TOTP) that work with thousands of services that support industry-standard 2FA, making it a privacy-respecting alternative to apps like Google Authenticator or Authy. Tokens are stored in a locally encrypted vault that can be unlocked with a strong password and optionally with device biometrics, and the app includes features such as encrypted backups, QR-code scanning, manual entry, and import/export from other authenticator apps so users can migrate their existing 2FA credentials easily and securely. Aegis provides extensive organization tools including custom icons, grouping, alphabetical and custom sorting, and search to help manage many accounts effectively, and its design emphasizes security and privacy.
    Starting Price: Free
  • 23
    2FAS Auth
    2FAS is a two-factor authentication and password management platform centered on its open source 2FAS Authenticator app, which helps users add a strong second layer of login security to online accounts by generating time-based and event-based one-time codes that refresh frequently to defend against unauthorized access, making it easier to secure email, social, financial, and other services that support 2FA. It is designed to be simple, private, and secure, it works offline, does not store passwords or usage metadata, and doesn’t require users to create an account, offering anonymous use while still syncing codes across multiple mobile devices with encrypted backup options, biometric or PIN protection, and support for importing and exporting authentication seeds so you retain control of your data and can migrate between devices or apps.
    Starting Price: Free
  • 24
    Better Auth

    Better Auth

    Better Auth

    Better Auth is a framework-agnostic authentication and authorization framework for TypeScript designed to help developers implement secure login systems directly within their own applications and databases. It provides a full set of authentication features out of the box, including email and password login, session management, email verification, password reset, and support for over 40 social login providers such as Google, GitHub, etc., all configurable with minimal code. It is built to work with a wide range of modern frameworks like Next.js, Nuxt, SvelteKit, Astro, and Express, allowing teams to integrate authentication regardless of their tech stack while maintaining strong TypeScript support and type safety. Better Auth includes advanced capabilities such as multi-factor authentication, multi-tenant organization management, and enterprise features like SSO, SAML, and SCIM provisioning, making it suitable for both simple apps and large-scale systems.
    Starting Price: Free
  • 25
    Zunoy Authenticator

    Zunoy Authenticator

    Mentcube Innovations Pvt Ltd

    Zunoy Authenticator is a security application that helps users protect online accounts with two-factor authentication (2FA). The app generates time-based one-time passwords (TOTP) that add an extra layer of security beyond traditional usernames and passwords. Users can securely store authentication accounts, generate verification codes for supported services, and quickly access codes when signing in. The application is designed to simplify account protection while helping reduce the risk of unauthorized access caused by compromised passwords. It can be used with websites, cloud services, business applications, developer platforms, and other systems that support two-factor authentication. Zunoy Authenticator is suitable for individuals, businesses, developers, and organizations looking to strengthen account security and improve access protection across multiple online services.
    Starting Price: Free
  • 26
    SignOps

    SignOps

    SignOps

    SignOps is a hosted developer API for adding push messaging and sign-in flows to web and mobile applications. Developers can register devices under their existing user IDs, send Android, iOS and web push messages to users or topics, schedule messages, use templates, and review delivery events. The service also provides phone-based login approvals with number matching and biometric confirmation, passkey sign-in on a customer’s domain, TOTP authenticator codes with backup codes, and email one-time passwords. REST endpoints, server SDKs, mobile and web SDKs, a team dashboard, and signed webhooks support integration with an application’s existing backend and identity provider. It is designed for developers and teams building applications that need notifications, passwordless authentication, or additional sign-in verification.
    Starting Price: ₹499/month
  • 27
    WSO2 Identity Server
    WSO2 Identity Server is API-driven, is based on open standards with the deployment options of on-premise, cloud or hybrid. It supports complex IAM requirements given its high extensibility. WSO2 Identity Server helps you do single sign-on and identity federation backed by strong and adaptive authentication, securely expose APIs, and manage identities by connecting to heterogeneous user stores. Leverage the power of open-source IAM in your enterprise to innovate fast and build secure Customer IAM (CIAM) solutions to provide an experience your users will love
  • 28
    Super Gluu
    Super Gluu is a push-notification two-factor authentication (2FA) mobile app built to work with the Gluu Server. Super Gluu uses public-key encryption as specified in the FIDO U2F authentication standard. Upon device enrollment, Super Gluu registers its public key against the Gluu Server's FIDO U2F endpoint. When authentication happens, there is a challenge response to ensure that the device has the corresponding private key. Better identity access management for customers, citizens, and remote workforce. Super Gluu is supported by the Gluu Server out-of-the-box -- simply turn it on! Make strong access security as easy as approving a push notification. Make strong access security as easy as approving a push notification. The Gluu Server and Super Gluu can work in the same network, without a DNS server hostname and with a self-signed certificate. There is only one limitation: both components should belong to the same network.
  • 29
    Asgardeo
    Asgardeo helps developers implement secure authentication flows to applications in a few simple steps. Easily integrate single page, regular web, and mobile applications. SDKs that enable working with various technology stacks. Enable social sign-in with Google, Facebook, and GitHub using pre-defined templates (with more to follow). Configure external identity providers that can connect with open standards like OpenID Connect and SAML to your application. Manage your customers, employees, and partners with (default) supported onboarding and management workflows. Use Asgardeo provided directory or plug in your own LDAP or Active Directory via an agent. Choose from a variety of methods such as Email OTP, SMS OTP, and TOTP for 2FA. Define multiple steps and configure options according to user requirements. Unlock the full application experience by focusing on the business logic and enable login and secure access to end-users.
  • 30
    Studid

    Studid

    Studid

    Studid allows your student, research and education users to authenticate natively with the SSO (Single Sign-on) Service of their institution.
    Starting Price: $0