Authentication that ships with your product_
Give users a secure sign-in experience without building auth infrastructure. Appwrite Auth supports the methods your users expect, team collaboration signals, and the controls your team needs.
- OAuth providers
- 40+
- Sign-in methods
- 7
- Memberships & roles
- Multi-Tenancy
- Two-factor auth
- MFA
- Team collaboration
- Presences
OAuth 2 and social login
Enable 30+ social providers from the Console Social providers tab. Users sign up in one click with GitHub, Google, Apple, and the identity providers your audience already uses.
Social providers
Enable OAuth 2 sign-in for external accounts.
Popular
More providers
One-click signup via GitHub, Google, Apple, and more.
Passwordless login
Turn on Magic URL, Email OTP, and Phone SMS from Auth settings. Ship secure sign-in without storing or resetting passwords.
Auth settings
Magic URL
Email OTP
Phone SMS
Email / Password
Optional fallback
Sign in
Choose a method
Magic URL
Email link sign-in
Email OTP
6-digit code
Phone SMS
Text verification
Multi-tenancy with teams and roles
Model each customer or workspace as a team with memberships, invites, and roles. Scope databases, storage, and other resources to the right tenant from the Console Users and Teams tabs, without building custom RBAC.
Acme Engineering
3 members · Owner access
Walter O'Brien
walter@acme.io
Paige Dineen
paige@acme.io
Happy Quinn
happy@acme.io
documents.reports
Share tables, buckets, and functions without building custom RBAC.
SSR authentication
Verify sessions from Next.js, Nuxt, SvelteKit, and other server-rendered apps. Issue session cookies from your backend with dedicated guides and tutorials.
SSR
Server-side session
Security policies you control
Fine-tune Auth from the Console Policies and Settings tabs. Set session length and limits, password strength and history, email signup rules, membership privacy, and which auth methods are enabled for your project.
Session length
Session validity duration.
30 days
Sessions limit
Concurrent sessions per user.
10 active sessions
Session alerts
Notify on new sign-in.
Invalidate sessions
Revoke after password change.
Password policies
Strength presets, compliance checks, and reuse rules.
Dictionary check
Personal data check
Email policies
Block disposable emails
Block aliased emails
Block free providers
Auth methods
Multi-factor authentication
Add TOTP authenticator apps and recovery codes for sensitive accounts. Require MFA when users update credentials or access protected actions.
Security
Multi-factor authentication
Authenticator app
TOTP codes from Google Authenticator, 1Password, and similar apps.
Enter verification code
Require MFA for sensitive actions
Extra verification before account changes
Recovery codes
One-time backup codes when authenticator access is unavailable.
Presence for team collaboration
Show who is online, on the same page, or typing in team chat. Presences sync status and metadata over Realtime so you can add collaboration cues to shared docs, dashboards, and support tools without building sockets.
Team workspace
See who is working together
3 online
Shared doc
Q4 launch plan
Paige viewing /teams/acme/roadmap
Happy Quinn is typing in team chat
Tools built for developers and agents_
API-first by design. Use the Console, Realtime, SDKs, CLI, Terraform, MCP, and agent skills on the same project.
Developer and agent experience
A typical integration in TypeScript.
import { Client, Account } from 'appwrite';
const client = new Client() .setEndpoint('https://<REGION>.cloud.appwrite.io/v1') .setProject('<PROJECT_ID>');
const account = new Account(client);
const session = await account.createEmailPasswordSession({ email: 'paige@example.com', password: 'password',});
console.log(session.userId);Everything is an API
REST, GraphQL, and SDKs for every service. Automate and integrate without console-only workflows.
Console
Manage every service in your project from a unified Console. Optimized keyboard access and a Command Center keep you moving fast.
Realtime
Subscribe to live events and react to changes as they happen.
account
users.*.create
MCP
Connect AI agents to your Appwrite project, APIs, and docs through MCP servers.
appwrite-docs
appwrite-apiTerraform
Manage Appwrite infrastructure as code with the official provider.
terraform plan
terraform applyAgent skills
Give AI agents SDK-accurate knowledge of Appwrite services and APIs.
npx skills add appwrite/agent-skillsSDKs
Client and server SDKs for the platforms your team already uses. 15 official SDKs available across client and server runtimes.
CLI
Deploy resources, manage projects, and generate typed SDKs from your terminal.
appwrite login
appwrite deployFAQ_
Yes. Appwrite Auth is API-first, so you keep full control of the UI in your app and call the Account SDK for sign-up, login, sessions, and MFA. Quick starts cover React, Next.js, Vue, SvelteKit, Flutter, and other platforms. For server-rendered apps, verify sessions on your backend and issue HTTP-only cookies using the SSR guides.
Start building with Auth_
Create a project and add authentication in minutes with our quick start guides.
Explore Appwrite_
Modular backend services that share the same project, permissions model, and console.