Auth0 alternatives and what they cost at 10,000 and 50,000 users
Auth0's Free plan covers up to 25,000 monthly active users. The first paid consumer plan, B2C Essentials, is $700/mo at 10,000 MAU on monthly billing, and above 30,000 MAU the pricing page sends you to sales. The 99.99% SLA, HIPAA BAA and private deployment are Enterprise features with no public price. The table below shows what eight alternatives charge at the same two volumes, taken from each vendor's own pricing page.
- Free at 50,000 users: Clerk Hobby, WorkOS AuthKit, Supabase Free and Firebase Auth with Identity Platform. Auth0 Free stops at 25,000.
- Cheapest paid plan at 50,000: Clerk Pro and Supabase Pro, both $25/mo on monthly billing.
- Per-MAU on AWS: Amazon Cognito Essentials is $0 at 10,000 MAU and $600/mo at 50,000.
- No license fee: Keycloak and FusionAuth Community, self-hosted on servers you pay for.
What you will pay
Monthly cost at 10,000 and 50,000 users, plan by plan
List prices for consumer (B2C) sign-in, with the billing cycle on every price, plus whether you can self-host and which certifications each vendor publishes. "Not published" means the vendor shows no price at that volume.
| Tool and plan | Billing unit and free allowance | 10,000 MAU | 50,000 MAU | Self-host | Published certifications |
|---|---|---|---|---|---|
| Auth0 Free | Per MAU, free up to 25,000 MAU | $0 | Over the 25,000 MAU cap | No | ISO 27001/27017/27018, SOC 2, PCI DSS, HIPAA |
| Auth0 B2C Essentials | Per MAU, monthly or yearly billing | $700/mo billed monthly; $7,700/yr billed yearly | Not published: slider ends at 30,000, then contact sales | No | Same as above |
| Auth0 B2C Professional | Per MAU, monthly or yearly billing | $1,600/mo billed monthly; $17,600/yr billed yearly | Not published: contact sales from 30,000 | No | Same as above |
| Clerk Hobby | Per retained user (MRU), 50,000 MRU free per app | $0 | $0 | No | SOC 2 Type 2, HIPAA (since May 2022) |
| Clerk Pro | $25/mo billed monthly or $20/mo billed annually; 50,000 MRU included, then $0.02/MRU | $25/mo | $25/mo | No | Same as above |
| WorkOS AuthKit | Active users, free up to 1,000,000; then $2,500/mo per extra million | $0 | $0 | No | SOC 2 Type 2; HIPAA BAA available |
| Supabase Free | 50,000 MAU; projects pause after 1 week idle | $0 | $0 | Yes (Docker or CLI) | SOC 2 Type 2, HIPAA (with BAA) |
| Supabase Pro | From $25/mo billed monthly; 100,000 MAU included, then $0.00325/MAU | From $25/mo | From $25/mo | Yes (Docker or CLI) | Same as above |
| Amazon Cognito Lite | 10,000 MAU free, then $0.0055/MAU, billed monthly | $0 | $220/mo | No | SOC, PCI, FedRAMP, HIPAA |
| Amazon Cognito Essentials (default) | 10,000 MAU free, then $0.015/MAU, billed monthly | $0 | $600/mo | No | Same as above |
| Amazon Cognito Plus | No free tier, $0.020/MAU, billed monthly | $200/mo | $1,000/mo | No | Same as above |
| Firebase Auth with Identity Platform, tier 1 sign-in | 50,000 MAU free, then $0.0055/MAU, billed monthly; SMS extra | $0 | $0 | No | ISO 27001, SOC 1/2/3 |
| Stytch Consumer, pay as you go | 10,000 MAU always free | $0 | Not published: calculator ends at 30,000, then contact sales | No | Not found on a Stytch page |
| FusionAuth Community | Self-hosted, free and unlimited | $0 license | $0 license | Yes | GDPR; HIPAA BAA for hosted plans |
| FusionAuth Starter (hosted) | Priced by MAU band, billed annually | $162/mo billed annually | $462/mo billed annually | Yes (Community) | Same as above |
| Keycloak Open source (Apache 2.0) | No per-user fee; you run the servers | $0 license | $0 license | Yes (only option) | None: you audit your own deployment |
Formula: (users above the free allowance) × published per-user rate, at list price, with no add-ons, SMS, taxes or discounts. Example: Cognito Essentials at 50,000 MAU = 40,000 × $0.015 = $600/mo. Clerk counts monthly retained users (users who come back at least 24 hours after signing up) and WorkOS counts users with any activity in the calendar month; the others count MAU. Auth0 prices were read from its pricing slider, B2C tab, with both billing toggles. Supabase Pro adds compute billed hourly, with $10/mo of compute credits included.
Checked 2026-11-10: Auth0 pricing · Auth0 compliance · Clerk pricing · Clerk security · WorkOS pricing · WorkOS security · Supabase pricing · Supabase security · Cognito pricing · Cognito compliance · Identity Platform pricing · Firebase privacy and security · Stytch pricing · FusionAuth pricing · FusionAuth security · Keycloak license
The shortlist
Eight Auth0 alternatives and the trade-off each one asks for
Each card names what the tool covers that Auth0 charges more for, and what you give up.
Hobby is free up to 50,000 monthly retained users per app; Pro is $25/mo billed monthly ($20/mo billed annually) with the same 50,000 included, then $0.02 per user. One SSO connection comes with Pro; extra ones are $75/mo each. Trade-off: MFA is not on the free plan, and the SOC 2 report is only shared on Business ($300/mo billed monthly).
AuthKit is free up to 1 million users, then $2,500/mo per extra million. SSO and Directory Sync cost $125 per connection per month for the first 15, falling to $65 at 51–100, and an Admin Portal lets your customers' IT admins set up their own connection. Trade-off: a custom domain is $99/mo, and every enterprise customer adds a connection fee.
Auth comes with a Supabase project and its Postgres database. Free covers 50,000 MAU; Pro starts at $25/mo billed monthly with 100,000 MAU included, then $0.00325 per MAU. You can self-host with Docker or the CLI. Trade-off: free projects pause after a week without activity, and phone MFA is a $75/mo add-on.
Apache 2.0 licensed, with OpenID Connect, OAuth 2.0 and SAML 2.0, sign-in through other SAML or OIDC identity providers, and built-in LDAP and Active Directory federation. There is no per-user fee. Trade-off: you host, patch, back up and audit it yourself.
Lite and Essentials include 10,000 MAU free per account with no expiry; above that Lite is $0.0055 and Essentials $0.015 per MAU, billed monthly. Plus has no free tier and costs $0.020 per MAU. User pools created on or before November 22, 2024 keep a 50,000 MAU free tier. Trade-off: it ties sign-in to your AWS account.
With Identity Platform, email, phone, anonymous and social sign-in are free up to 50,000 MAU, then $0.0055 per MAU. SAML and OIDC users are a separate tier: 50 free, then $0.015 per MAU. Trade-off: SMS is billed per message, and the product sits inside Google Cloud.
The consumer pay-as-you-go plan is free up to 10,000 monthly active users and includes 5 SSO or SCIM connections. Bot detection and device fingerprinting are add-ons. Trade-off: the public calculator stops at 30,000 users, so 50,000 users means a sales conversation, as with Auth0.
Community is free and unlimited on your own servers. Hosted Starter starts at $162/mo billed annually for up to 10,000 MAU and $462/mo billed annually at 50,000. Trade-off: hosted plans are priced by MAU band like Auth0, and the free Community edition means running it yourself.
Leaving Auth0
How to move users and password hashes out of Auth0
Step one is a bulk export job through the Management API, which returns user profiles as NDJSON or CSV; Auth0 does not offer it on the Free plan. Step two is a support case for password hashes and MFA secrets, which are not in that export: Auth0 encrypts them to a PGP key you generate (RSA, 4096 bits or more) and does not guarantee a delivery date. Then import both files into the new provider with its own tool:
| Destination | Official import path | Keeps existing passwords? | Docs |
|---|---|---|---|
| Clerk | Backend API CreateUser endpoint (rate limited) or Clerk's open-source migration script | Yes: pass the hash with its password_hasher value | Guide |
| WorkOS | WorkOS migrations CLI or the WorkOS APIs; a dedicated Auth0 guide merges the hash file into the export | Yes, from the Auth0 hash file | Guide |
| Supabase Auth | Supabase admin endpoints, following Supabase's Auth0 migration guide | Yes, the guide uses the Auth0 hash export | Guide |
| Amazon Cognito | CSV user import job, or a user migration Lambda trigger that moves users at sign-in | Yes with a hashing algorithm set (BCRYPT, SCRYPT, ARGON2ID, PBKDF2_SHA256); otherwise users must reset | Guide |
| Firebase Auth | firebase auth:import from the Firebase CLI with a --hash-algo flag | Yes, BCRYPT and other listed algorithms | Guide |
| FusionAuth | Auth0-specific guide: bulk import through the /api/user/import endpoint with FusionAuth's script | Yes, from the Auth0 hash export | Guide |
Social and enterprise connections do not move with the export; you set them up again in the new provider. Keycloak and Stytch are left out of this table because we could not confirm an Auth0 import path in their public docs.
Checked 2026-11-10: Auth0 bulk user export · Auth0 password hash export · Auth0 export data
Method
How we checked
Every price was read from the vendor's own pricing page on November 10, 2026; Auth0, Stytch and FusionAuth render prices with JavaScript, so we moved their sliders to each volume and read the rendered numbers. Computed cells are list rate times users above the free allowance, with taxes, SMS, add-ons and promotions left out. Certifications come from each vendor's security or compliance page. We did not list security incidents, because we could not confirm a dated list from a primary source for every vendor.
Common questions
Auth0 pricing and switching: common questions
How much does Auth0 cost at 10,000 monthly active users?
On the B2C Essentials plan, 10,000 MAU costs $700/mo billed monthly or $7,700/yr billed yearly. B2C Professional at the same volume is $1,600/mo billed monthly or $17,600/yr billed yearly. The Free plan covers up to 25,000 MAU with one custom domain, five Organizations, basic attack protection and community support.
Does Auth0 publish a price for 50,000 users?
No. The pricing slider on auth0.com/pricing stops at 30,000 MAU, where B2C Essentials is $2,100/mo billed monthly. Above that, and for B2C Professional at 30,000, the page says to get in touch with sales.
Which Auth0 alternatives are free at 50,000 monthly users?
Clerk Hobby (50,000 monthly retained users per app, MFA needs Pro), WorkOS AuthKit (free up to 1 million users), Supabase Free (50,000 MAU, but projects pause after a week of inactivity and you get two active projects) and Firebase Authentication with Identity Platform (email, phone, anonymous and social sign-in free up to 50,000 MAU, SMS billed separately). Keycloak and FusionAuth Community have no license fee, but you pay for the servers you run them on.
Can I take my users' password hashes with me when I leave Auth0?
Yes, through a support ticket. Profiles come out of a bulk export job as NDJSON or CSV, which Auth0 does not offer on the Free plan. Password hashes and MFA secrets are not in that export: you open a support case and Auth0 sends them encrypted to a PGP key you generate. WorkOS's Auth0 migration guide says the ticket can take a week or more.
What does enterprise SSO cost outside Auth0?
WorkOS charges $125 per SSO connection per month for the first 15 connections. Clerk Pro includes one SSO connection and charges $75/mo for each extra one. Amazon Cognito and Google Identity Platform give 50 SAML or OIDC users free, then $0.015 per MAU, and Supabase Pro includes 50 SSO MAU, then $0.015 per MAU. Auth0's Free plan includes one Enterprise Connection; keeping enterprise connections on a paid plan means a B2B plan, which at 10,000 MAU is $2,100/mo billed monthly for B2B Essentials.