Skip to content
Appwrite Auth

Authentication that ships with your product_

Give users a secure sign-in experience without building auth infrastructure. Appwrite Auth supports the methods your users expect, team collaboration signals, and the controls your team needs.

OAuth providers
40+
Sign-in methods
7
Memberships & roles
Multi-Tenancy
Two-factor auth
MFA
Team collaboration
Presences

OAuth 2 and social login

Enable 30+ social providers from the Console Social providers tab. Users sign up in one click with GitHub, Google, Apple, and the identity providers your audience already uses.

OverviewSocial providersSettings

Social providers

Enable OAuth 2 sign-in for external accounts.

30+ providers

Popular

Google
GitHub
Apple
Discord
Microsoft
Spotify

More providers

GitLab
LinkedIn
Slack
Twitch
Facebook
Okta

One-click signup via GitHub, Google, Apple, and more.

Passwordless login

Turn on Magic URL, Email OTP, and Phone SMS from Auth settings. Ship secure sign-in without storing or resetting passwords.

Auth settings

Magic URL

Email OTP

Phone SMS

Email / Password

Optional fallback

Sign in

Choose a method

Magic URL

Email link sign-in

Email OTP

6-digit code

Phone SMS

Text verification

await account
.createMagicURLToken(
'paige@acme.io')

Multi-tenancy with teams and roles

Model each customer or workspace as a team with memberships, invites, and roles. Scope databases, storage, and other resources to the right tenant from the Console Users and Teams tabs, without building custom RBAC.

UsersTeamsSecurity

Acme Engineering

3 members · Owner access

W

Walter O'Brien

walter@acme.io

Owner
P

Paige Dineen

paige@acme.io

Developer
H

Happy Quinn

happy@acme.io

Member

documents.reports

team:acme/readuser:walter/updaterole:developer/read

Share tables, buckets, and functions without building custom RBAC.

SSR authentication

Verify sessions from Next.js, Nuxt, SvelteKit, and other server-rendered apps. Issue session cookies from your backend with dedicated guides and tutorials.

SSR

Server-side session

Next.js
Nuxt
SvelteKit
middleware.ts
import { createSessionClient } from '@appwrite.io/ssr'
const client = createSessionClient(request)
const account = await client.account.get()
Session verifiedSet-Cookie: a_session_...

Security policies you control

Fine-tune Auth from the Console Policies and Settings tabs. Set session length and limits, password strength and history, email signup rules, membership privacy, and which auth methods are enabled for your project.

Session length

Session validity duration.

30 days

Sessions limit

Concurrent sessions per user.

10 active sessions

Session alerts

Notify on new sign-in.

Enabled

Invalidate sessions

Revoke after password change.

Enabled

Password policies

Strength presets, compliance checks, and reuse rules.

Dictionary check

Personal data check

Strong presetMin 12 charsHistory: 54/7 compliant

Email policies

Block disposable emails

Block aliased emails

Block free providers

Auth methods

Email/Password
Magic URL
Phone
Anonymous
JWT

Multi-factor authentication

Add TOTP authenticator apps and recovery codes for sensitive accounts. Require MFA when users update credentials or access protected actions.

Security

Multi-factor authentication

Authenticator app

TOTP codes from Google Authenticator, 1Password, and similar apps.

MFA enabled

Enter verification code

482190

Require MFA for sensitive actions

Extra verification before account changes

Recovery codes

a8f2-k9m1p3q7-r2n8x5y1-z4w6h7j3-l0c9

One-time backup codes when authenticator access is unavailable.

Presence for team collaboration

Show who is online, on the same page, or typing in team chat. Presences sync status and metadata over Realtime so you can add collaboration cues to shared docs, dashboards, and support tools without building sockets.

Team workspace

See who is working together

HQ
PD
TC

3 online

Happy
Paige

Shared doc

Q4 launch plan

Finalize hero copy
Review pricing section

Paige viewing /teams/acme/roadmap

Happy Quinn is typing in team chat

Typing

FAQ_

Yes. Appwrite Auth is API-first, so you keep full control of the UI in your app and call the Account SDK for sign-up, login, sessions, and MFA. Quick starts cover React, Next.js, Vue, SvelteKit, Flutter, and other platforms. For server-rendered apps, verify sessions on your backend and issue HTTP-only cookies using the SSR guides.

Start building with Auth_

Create a project and add authentication in minutes with our quick start guides.