User sign-in in minutes.
A complete account system built on GoTrue — the same one Supabase uses. Users land in your database's auth.users table, sessions are JWTs signed with the project secret, and you control access with RLS policies.
await db.auth.signUp({ email: 'jane@acme.com', password: 'Passw0rd-2026!' })
const { data, error } = await db.auth.signInWithPassword({
email: 'jane@acme.com',
password: 'Passw0rd-2026!',
})
// The user's JWT goes with every query — RLS does the rest
const { data: orders } = await db.from('orders').select('*')Capabilities
What you get with Auth
E-mail and password
Sign-up and sign-in work as soon as the project is created — addresses are confirmed automatically.
Users in the dashboard
Search, add, ban and delete accounts, plus a 30-day sign-up chart.
Row Level Security
auth.uid() in Postgres policies — authorization where the data lives.
MFA (TOTP)
Two-factor authentication with an authenticator app via supabase-js.
Magic link and OTP
Passwordless sign-in — once you connect your own SMTP in the dashboard.
OAuth
Google, GitHub, Apple, Microsoft and more — providers configured in the dashboard. SAML SSO coming soon.
Use cases
What teams use it for
Consumer apps
Social login lifts sign-up conversion.
B2B tools
In-app roles and permissions via app_metadata and RLS policies.
Mobile apps
Native SDKs for Flutter, Swift and Kotlin with token refresh.
The rest of the platform
Every service shares the same database, authentication and permissions.
Build in a weekend. Scale to millions.
Spin up a free project in 2 minutes. No credit card, no pausing after a week.