Supabase Auth
FreemiumOpen-source Firebase Authentication alternative.
Scores
About
Supabase Auth is the authentication service built into Supabase, based on the open-source GoTrue server. It integrates natively with PostgreSQL's Row Level Security (RLS) — the authenticated user's ID (auth.uid()) and role (auth.role()) are automatically available inside RLS policies, making data-level authorization a natural extension of authentication rather than a separate layer.
Supported auth methods include email/password, magic links, social providers (Google, GitHub, GitLab, Bitbucket, Azure, and more), and phone OTP via Twilio or MessageBird. TOTP-based MFA is supported. The JWT issued on login is used as a Bearer token for the Supabase REST and GraphQL APIs, tying auth directly to the API authorization model.
Supabase Auth is fully open-source and self-hostable — teams can run the entire Supabase stack (database + auth + storage + functions) on their own infrastructure. Hosted on Supabase Cloud, auth is included in all plans including the free tier.
Key Features
- Open-source and self-hostable
- Native PostgreSQL RLS integration
- Social OAuth providers
- Phone authentication with SMS
- Magic link passwordless login
- Multi-factor authentication (MFA)
- User metadata and custom claims
- Row-level security integration
Pros
- Open-source and self-hostable
- Excellent PostgreSQL integration
- Generous free tier
- Part of full-stack platform (DB, Storage, Functions)
- No vendor lock-in
- Active open-source community
Cons
- Requires using Supabase or self-hosting
- Fewer pre-built UI components than Clerk
- Enterprise SSO less mature than Auth0
- Documentation still improving
- Some features in beta
Pricing
Freemium- · 50,000 MAU
- · 3 social providers
- · Email authentication
- · Database included
- · 100,000 MAU
- · Unlimited social providers
- · Daily backups
- · No pause on inactivity
- · 500,000 MAU
- · SSO/SAML
- · SOC2 compliance
- · Role-based access
- · Unlimited MAU
- · Enterprise SLA
- · Dedicated support
- · Custom contracts
Possible Stacks
Supabase + Next.js
ProjectThe fastest way to launch a modern web app. Next.js handles the frontend and API routes; Supabase provides Postgres, auth, realtime, and storage out of the box.
React Native + Supabase
ProjectCross-platform mobile app built with Expo's managed workflow and backed by Supabase. Ships to iOS and Android from a single JavaScript codebase.
Browser Extension Starter
ProjectA beginner-friendly stack for building cross-browser extensions. WXT handles the Manifest V3 boilerplate and cross-browser packaging; React and TypeScript provide a familiar component model; Supabase adds cloud storage and auth if the extension needs a backend.
Related Tools
Works well with (5)
Alternative to (4)
Learning Resources
No resources yet — check back soon.
