Appwrite Auth

Appwrite Auth is the authentication service inside every Appwrite project. It signs users in with email and password, magic URLs, email or SMS one-time codes, dozens of OAuth providers, anonymous sessions, and passkeys, and adds multi-factor authentication with authenticator apps, email, or phone. Users, sessions, and teams live in the same project as the app's databases, storage, and functions, so the same permission model decides what each signed-in user or team can read and write.

Client SDKs keep the session on the device for browser, Flutter, React Native, and native mobile apps, and server SDKs let a backend or a server-rendered framework such as Next.js, Nuxt, or SvelteKit create sessions and pass them to the browser as cookies. Server code can also mint custom tokens, which lets an existing login system hand its users over to Appwrite. Since Appwrite 2.0 a project can act as an OAuth 2.1 and OpenID Connect provider for other apps.

Appwrite Auth comes with Appwrite Cloud and with self-hosted Appwrite, and it cannot be used without an Appwrite project. On Cloud, monthly active users are part of the plan allowance, with 75K on the Free plan and 200K on Pro. Teams that need enterprise SSO through SAML, or one identity layer shared by services outside Appwrite, usually pair Appwrite with a dedicated provider instead.