Skip to main content

Convex Auth

Convex Auth v2 is in beta

Do not use Convex Auth v2 in production projects yet. The APIs may change before the general availability release.

The beta meets the same security bar as the stable release. However, it has no guaranteed upgrade path to the stable v2 release, and only the newest beta gets bug fixes.

Convex Auth is the best way to add authentication to your Convex app.

  • ✅ Runs inside of your app, no external auth service required.
  • ✅ Passwords, passkeys, and OAuth logins out of the box.
  • ✅ 100% free and open source.

Frequently Asked Questions​

What's the status of Convex Auth?​

Convex Auth is in active development and hasn't reached a stable release yet. These are the docs for the new development branch of Convex Auth which is built on Convex Components and is targeting a public stable release in Q4 2026.

It currently includes features to build basic user sign-up/sign-in using passwords, passkeys and Apple, Google, or GitHub OAuth.

You can try Convex Auth in its current state but beware that the API and schema may change in breaking ways before the stable release.

How much does it cost?​

Convex Auth is 100% free and open source (Apache-2.0 license).

If you host your Convex deployment on Convex Cloud, the standard resource pricing applies.

Does Convex Auth support what my app needs?​

Currently Convex Auth supports several login methods out of the box:

Additional feature will be available with the stable release.

Will my app be secure?​

Convex Auth gives you secure defaults. Its features are carefully designed to avoid common security pitfalls.

When using Convex Auth, the most sensitive data is stored in components that are isolated from the rest of your app. This ensures that sensitive data is never exposed, and that it is always accessed in ways that are safe (e.g. using hashes, salts, and rate limits where necessary). The components are designed so that they can only be used safely.

Do I keep control of my user data?​

Absolutely. All the data in Convex Auth is stored inside of your app’s database. You stay in control of the user data, and you can export it at any time.

Which front-end libraries or frameworks can I use Convex Auth with?​

warning

WIP

How is it different compared to…​

…WorkOS/Clerk/Auth0?​

warning

WIP

…Convex + Better Auth?​

warning

WIP

…Convex Auth v1?​

See: What’s new in Convex Auth v2?