Better Auth

Framework-agnostic authentication and authorization library for TypeScript. Delivers a full set of features out of the box and a plugin ecosystem to add advanced capabilities without extra services or heavy custom code.

Trusted by organizations such as OpenAI, Databricks, and Strapi. Differentiates from alternatives by covering complex flows, like 2FA, multi-tenancy, and passkeys, with minimal configuration instead of relying on third-party auth services. Data stays in your database with any SQL or document store. Maintained by a large contributor base and ships with MCP server integration for AI-assisted configuration.

Key capabilities:

• Email and password, magic links, passkeys, and 40+ social providers with declarative config
• Organizations plugin for multi-tenancy, teams, roles, and invitations
• Enterprise SSO, SAML 2.0, and SCIM provisioning
• 50+ plugins for API keys, anonymous auth, JWT, and community extensions
• Direct database support for PostgreSQL, MySQL, SQLite, MongoDB, LibSQL, with adapters for Prisma, Drizzle, Mongoose, TypeORM, Kysely, and MikroORM
• First-class support for Next.js, Nuxt, SvelteKit, Astro, Hono, Express, and many other frameworks

Teams adopt it for SaaS apps needing org-based access control, B2B products requiring SSO and directory sync, and projects that prefer self-hosted auth with full data ownership. The CLI and MCP integration streamline adding providers and plugins directly from the terminal or AI assistants.