Laravel Auth
Open SourceGuards, providers, and sessions out of the box in Laravel.
Published 27 September 2026
LaravelScores
About Laravel Auth
Laravel Auth is the authentication system built into Laravel: guards, providers, password hashing, and session and token handling, all shipped with the framework itself. The Auth facade and Authenticatable contract give a project a working login system, protected routes, and access to the current user before any auth code has been written.
Guards define how a request is authenticated (session-based for a typical web app, token-based for an API), and providers define where user records come from, Eloquent by default, with both swappable through config rather than code changes. Password hashing (bcrypt or Argon2), password reset brokers, email verification, and remember-me tokens work the same way whichever guard a route uses, and gates and policies handle authorization on top.
Laravel's official starter kits for React, Svelte, Vue, and Livewire scaffold login, registration, password reset, and two-factor screens on top of this system through Laravel Fortify rather than replacing it. For social login, SPA or mobile API tokens, and OAuth servers, Laravel's own packages (Socialite, Sanctum, and Passport) layer onto the same guard and provider foundation.
Key Features
- Guard-based authentication with swappable user providers
- Session and token guards configured out of the box
- Password hashing with bcrypt or Argon2
- Password reset brokers and email verification (MustVerifyEmail)
- Remember-me tokens and login rate limiting
- Gates and policies for authorization
- Foundation for Fortify, Sanctum, Socialite, and Passport
Pros
- Working login and protected routes before writing any custom auth code
- Guards and providers are swappable through config, not code rewrites
- Official starter kits and first-party packages all build on the same foundation
Cons
- No scaffolded login or registration views by itself; needs a starter kit or custom UI
- No social login or MFA without adding Socialite or Fortify
- Token/API auth needs Sanctum or Passport layered on top for anything beyond sessions
Laravel Auth Pricing
Open SourceTools Related to Laravel Auth
Part of(1)
Laravel Auth is Laravel's built-in authentication system — guards, providers, and sessions shipped with the framework itself.
Alternatives to Laravel Auth(1)
Laravel's built-in Auth handles session/token guards and providers; Fortify is the alternative when a project needs a full headless backend for registration, email verification, and two-factor authentication out of the box.
Learning Resources
No resources yet — check back soon.