Overview
Better Auth is an authentication framework for TypeScript that lives inside your application instead of in a vendor's cloud. You declare auth in code (email and password, social providers such as Google, GitHub, Apple and Discord) and add plugins for two-factor, passkeys, magic links, email OTP, phone numbers, anonymous users, organizations with roles and invitations, API keys, JWTs, SSO with SAML 2.0, SCIM, MCP auth and more. Users and sessions are stored in your own database.
The framework is free and open source with no user limits, has more than 930 contributors, and works with Next.js, Nuxt, SvelteKit, Astro, Hono and over 20 other frameworks. Because configuration is code, changes are versioned and reviewed like any other code.
Better Auth Inc. sells optional infrastructure that connects to your self-hosted setup: a user and organization dashboard, audit logs, Sentinel threat detection (bot detection, brute force, breached passwords, impossible travel), transactional email and SMS, and hosted self-service SSO and directory sync. Starter is free and Pro is $20 a month plus usage. The company has announced it is joining Vercel.
Pricing and plans
checked 28 Sept 2026Free tier · no card
The framework is free and open source with no user limit. Infrastructure Starter is free: 1 dashboard seat, 10,000 audit logs and 1,000 security detections a month, 1-day retention
| Plan | Price | What you get |
|---|---|---|
| Framework | Free | Open source, your database, unlimited users |
| Infrastructure Starter | Free | 1 seat, 10,000 audit logs, 1,000 security detections per month |
| Infrastructure Pro | $20/mo | Unlimited seats, 20,000 audit logs, 10,000 detections, 1 SSO and 1 directory sync connection, email $0.001, SMS $0.09 |
| Infrastructure Enterprise | Custom | Custom retention, custom domain and log drain, dashboard RBAC, Slack support |
What it does
- Plugin ecosystem
- 50+ plugins covering 2FA, passkeys, magic links, organizations, API keys, SSO, SCIM, Stripe and Polar integrations and more.
- Your own database
- Users, sessions and organizations live in your database through adapters, so there is no vendor lock-in.
- Multi-tenancy
- Organization plugin with teams, roles, invitations and access control.
- Auth for AI agents
- MCP auth, token exchange and agent delegation plugins.
- Sentinel
- Hosted threat detection including bot detection, rate limiting, geo blocking and disposable email checks.
- Dashboard and audit logs
- Hosted user, session and organization management with searchable audit logs and SIEM log drain.
Strengths and limitations
Strengths
- Free with no per-user fees
- Data stays in your own database
- Very broad plugin set including SSO and SCIM
- Type-safe configuration in code
Limitations
- TypeScript/JavaScript back ends only
- You run and secure the auth code and database yourself
- Dashboard, audit logs and threat detection need the paid infrastructure service
- Audit log retention is 1 day on Starter and 7 days on Pro
Who it suits
Good for
- TypeScript apps that want auth without a hosted vendor
- Side projects avoiding per-MAU pricing
- Teams wanting SSO and organizations without enterprise fees
Look elsewhere if
- Non-JavaScript back ends such as Go, Python or Java
- Teams wanting a fully managed identity service with SLAs
Alternatives to Better Auth
| Tool | From | Free option | Stages |
|---|---|---|---|
| Amazon Cognito Cloud user directory and auth service | Usage-based | Free tier | |
| Asgardeo Hosted CIAM (with open-source self-hosted option) | $20/mo | Free tier | |
| Authgear Open-source CIAM (cloud, VPC or one-time self-host licence) | $50/mo | Free tier | |
| Casdoor Open-source IAM and SSO server with MCP gateway | — | Free tier | |
| Clerk Hosted auth and user management | $25/mo | Free tier | |
| Firebase Backend platform with document and realtime databases | Usage-based | Free tier |
Questions
Is Better Auth free?
Yes. The framework is free and open source with no user limit; only the optional infrastructure service has paid plans.
Does Better Auth support SAML SSO?
Yes, through its SSO plugin, and the paid infrastructure adds hosted self-service SSO setup.
Where does Better Auth store users?
In your own database, through its database adapters.
Is Better Auth part of Vercel?
Its homepage announces that Better Auth is joining Vercel.
Sources read for this page