Authentication apps
418 authentication apps in one list: the established products, and every new one as it launches.
Updated
- Apps
- 418
- New
- +12
- Established
- 6
- Dead
- 58
New authentication apps per month
64 apps launched in the last 12 months, by month.
418 authentication apps in one list: the established products, and every new one as it launches.
Updated
64 apps launched in the last 12 months, by month.
The apps we added to this market most recently.
| # | App | Added |
|---|---|---|
| 1 |  Triwarden Triwarden is a native Mac app for Bitwarden and self-hosted Vaultwarden, built with Swift and SwiftUI. Get Touch ID unlock, password and passkey AutoFill, a global command palette, and Auto-Type for other apps. Manage multiple accounts with unified search, and use vault-stored SSH keys for authentication and Git signing. Open source and free for personal use, with a one-time license for work. | |
| 2 |  Epherem Epherem is a free source code security scanner for apps built with AI. It checks for common security issues involving authentication, database access, exposed API keys and vulnerable packages. Upload a ZIP or connect a GitHub repository to scan your app. Findings include plain-English explanations, suggested fixes and prompts you can paste into Claude Code, Lovable or Cursor. Reports can also be exported for review with your AI coding assistant, including issues the scanner couldn't verify. | |
| 3 | SH shpyrd Easily deploy your projects. Hosting, databases and auth included. | |
| 4 |  Kerabie Email Kerabie Email provides fast, secure, and professional business email built for reliability … | |
| 5 |  BookStack Self-hosted wiki platform for organizing documentation | |
| 6 |  Brnch Brnch is code hosting for how we build now: you and your coding agents in the same repo. It's Git underneath (for now), so your tools still work. Each agent gets its own identity and works under you as its sponsor, so you can see exactly what it did, down to the line. Every merge is tested on the exact result that lands, not just the branch, and comes with a signed receipt anyone can verify. To start, tell your agent: "Set me up on Brnch: brnch.io" | |
| 7 |  AuthMonster Most two-factor authentication apps are built almost as an afterthought by big companies like Google and Microsoft, with a clunky, bare-bones experience. AuthMonster takes a different approach: we put user experience front and center, wrapped in a lovable brand starring Toki, your token-eating monster. Under the hood, you get painless migration from apps like Google Authenticator and LastPass, biometric locking, and a donation-based model instead of paywalled features." | |
| 8 |  Pair2FA Pair2FA makes it easier for teams to share access to accounts protected by 2FA. No more asking someone for a code, sharing screenshots, or waiting for the person with the authenticator to be available. With Pair2FA, teammates can access the 2FA code when they need it, without interrupting whoever manages the account. It keeps shared accounts protected while making everyday team access much simpler. | |
| 9 |  MessyDev AI can build it. MessyDev helps you understand it. | |
| 10 |  The Talent App The Talent App is an MIT-licensed applicant tracking system for teams that want control of candidate data. Clone it, connect Supabase, deploy on your stack — or engage SparxIT for custom implementatio | |
| 11 | Twilio Communication APIs for SMS, Voice, Video & Authentication | |
| 12 |  WorkOS Enterprise APIs for SSO, SCIM Directory Sync, MFA, AuthKit user management, Audit Logs, and more. Free up to 1M monthly active users. |
The products every new one is compared with.
Grouped by what each app says it does. 80 of 418 apps fit a group so far.
| Type | Apps | Share | Examples |
|---|---|---|---|
| App development boilerplates | 41 | 51.2% | AI Starter, AVGTEMPLATE, BoilerCode |
| Authentication and security | 23 | 28.7% | Akku-Mobile, Amber Video, Amplo AUTH |
| Developer authentication tools | 6 | 7.5% | Authbase, Base API, LoginRadius |
| Business and marketing tools | 5 | 6.3% | Emgrid, LaunchCode, LeadRun |
| Email and messaging tools | 4 | 5.0% | 4th Office, DMARCeye, DMARCwise |
| Local retail services | 1 | 1.3% | GoLocal |
What we could detect on their websites.
| Framework | Apps | Share |
|---|---|---|
| Next.js | 154 | 71.3% |
| WordPress | 20 | 9.3% |
| PHP | 10 | 4.6% |
| Astro | 8 | 3.7% |
| Nuxt | 7 | 3.2% |
| SvelteKit | 7 | 3.2% |
| Remix | 4 | 1.9% |
Of 216 apps whose framework we could detect.
| Host | Apps | Share |
|---|---|---|
| Vercel | 114 | 90.5% |
| Netlify | 12 | 9.5% |
Of 126 apps whose host we could detect.
How many of the 418 apps show a price, and how many sell to large companies.
| Measure | Apps | Share of 418 |
|---|---|---|
| Publish a pricing page | 146 | 34.9% |
| Offer an enterprise plan | 16 | 3.8% |
Authentication software proves that a user or system is who they claim to be, then issues credentials the app can trust. It sits between your app and identity data, handling sign-up, sign-in, sessions, and step-up checks like multi-factor prompts.
A typical flow starts when a user opens a login form or a prebuilt widget from Clerk or Kinde. The user enters a password, uses a magic link, an authenticator app code, or a passkey via Web Authentication (WebAuthn). If policies require it, the system asks for an additional factor. SMS one-time codes can be sent through Twilio.
For workforce SSO, the app redirects the user to an identity provider using OpenID Connect or Security Assertion Markup Language (SAML), often brokered by WorkOS. After successful sign-in, the provider returns an assertion the authentication service validates.
Once verified, the service issues tokens (commonly JSON Web Token (JWT)) under OAuth or OpenID Connect. Your app stores a session and uses the tokens to call APIs. Scopes and roles limit what the user can do, while admin policies control password rules, factor enrollment, and risk checks.
Directories and lifecycle are kept in sync using System for Cross-domain Identity Management (SCIM), supported by WorkOS. Dashboards in Clerk and Auth0 let teams manage users, groups, and sessions, review audit logs, and block or revoke access.
Specialized cases plug into the same pipes. Legitt E-Signature adds advanced signer authentication before allowing an e-signature. Auth0 extends these patterns to service accounts and AI agents, so automated systems authenticate and receive scoped access just like users.
Vendors in this market usually charge based on usage volume and features, with generous free tiers for development.
| Pricing model | How it works |
|---|---|
| Monthly active users | The bill scales with the number of distinct users who authenticate in a month. |
| Tiered subscription | Feature bundles unlock items like SSO, advanced MFA, logs, and compliance at higher plan levels. |
| Per request or message | Charges accrue for verification events such as SMS or voice one-time codes. |
| Seats for admin and support | Extra cost for people who manage users, settings, or support in the dashboard. |
| Platform bundle | Auth included as part of a broader backend or communications suite, as with databases, storage, or messaging. |
