Convex Auth

Convex Auth is Convex's own first-party authentication library, distributed as the @convex-dev/auth package. It handles OAuth providers (GitHub, Google), email sign-in, and password authentication, storing users and sessions directly as Convex tables rather than in a separate auth service.

It sits alongside third-party options that also integrate with Convex — Clerk, Auth0, and Better Auth (via the official @convex-dev/better-auth adapter) — as the option maintained by the Convex team itself, with no extra service to configure or pay for separately. Projects that need enterprise SSO, more mature admin tooling, or auth shared across non-Convex services typically reach for one of those instead.

Because it is implemented as ordinary Convex functions rather than a separate hosted service, there is nothing extra to deploy — auth logic runs in the same backend as the rest of the app's queries and mutations. Beyond OAuth and passwords, it supports magic-link and one-time-code email sign-in, and because sessions are just Convex data, the React and Next.js client hooks pick up sign-in and sign-out changes reactively, the same way any other Convex query updates live in the UI.