# agentsite-static-version=7ee70d03-8933-4c5c-99c0-3e814d67b498
# supertokens.com

> AI-optimized mirror of supertokens.com containing 250 pages totalling 258,919 words of clean markdown content, structured data, and semantic HTML. Original source: https://supertokens.com. Last updated: 2026-10-27T07:52:58.312Z.

Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG).

## Homepage

- [SuperTokens, Open Source User Authentication](/content/site-root.html): Open Source User Authentication. Build fast, maintain control, with reasonable pricing. (594 words)

## Articles & Blog Posts

- [Migration from an older SuperTokens SDK to a newer one - SuperTokens Docs](/content/docs/additional-verification/mfa/migration/old-sdk-to-new/index.html): Upgrade your SuperTokens SDK to enable MFA, ensuring compatibility and smooth transition for existing users. (917 words)
- [Disable Sign Up - SuperTokens Docs](/content/docs/authentication/email-password/disable-signup/index.html): Learn how to disable the sign up flow (424 words)
- [Function Overrides - SuperTokens Docs](/content/docs/references/frontend-sdks/function-overrides/index.html): Override frontend authentication functions to implement custom use cases. (546 words)
- [Language Translation for the UI - SuperTokens Docs](/content/docs/references/frontend-sdks/prebuilt-ui/translations/index.html): Translate your UI by providing custom translation strings or integrating with an internationalization library. (424 words)
- [Hooks - SuperTokens Docs](/content/docs/references/frontend-sdks/hooks/index.html): Handle user actions for logging, analytics, or side effects using the Handle Event Hook. (473 words)
- [docs/quickstart/backend-setup/index.html](/content/docs/quickstart/backend-setup/index.html) (8,305 words)
- [User Object - SuperTokens Docs](/content/docs/references/backend-sdks/user-object/index.html): User Object page explains user structure, primary vs recipe user IDs, and account linking. (953 words)
- [Add a base path - SuperTokens Docs](/content/docs/platform-configuration/supertokens-core/base-path/index.html): Configure a base path for self-hosted core APIs by updating core config and backend SDK. (208 words)
- [User Creation without password hashes - SuperTokens Docs](/content/docs/migration/legacy/account-creation/ep-migration-without-password-hash/index.html): Open Source User Authentication (2,282 words)
- [Build vs. Buy Identity Management: 2026 Decision Matrix](/content/blog/build-vs-buy/index.html): undefined (2,121 words)
- [SuperTokens vs. Auth0: Self-Hosted vs. Managed Solutions](/content/blog/supertokens-vs-auth0/index.html): Explore the core differences between SuperTokens and Auth0 including their key features, pros and cons, and practical workflows. Whether you need full control with SuperTokens' self-hosted, open-source approach or the convenience of Auth0's managed service, this guide will help you choose the right authentication solution for your project. (1,910 words)
- [How to Manage User Sessions Securely | SuperTokens](/content/blog/the-best-way-to-securely-manage-user-sessions/index.html): Learn secure strategies to handle user sessions, mitigate vulnerabilities, and protect against XSS attacks with advanced session management techniques. (1,384 words)
- [Migrate from MySQL to PostgreSQL - SuperTokens Docs](/content/docs/deployment/migrate-from-mysql/index.html): Open Source User Authentication (1,542 words)
- [5a. Session verification in an API call - SuperTokens Docs](/content/docs/integrations/nextjs/pages-directory/protecting-backend/in-api/index.html): Implement session verification in API calls to securely fetch user session data. (270 words)
- [Netlify - SuperTokens Docs](/content/docs/integrations/netlify/index.html): Learn to set up SuperTokens authentication with Netlify using serverless functions. (551 words)
- [Self-host SuperTokens - SuperTokens Docs](/content/docs/deployment/self-host-supertokens/index.html): Deploy SuperTokens Core privately with Docker or on a VM and connect PostgreSQL for persistent storage. (1,180 words)
- [3. Adding auth APIs - SuperTokens Docs](/content/docs/integrations/nextjs/app-directory/setting-up-backend/index.html): Add authentication APIs to your backend using SuperTokens for sign in and sign up functionality. (224 words)
- [SMS delivery - SuperTokens Docs](/content/docs/platform-configuration/sms-delivery/index.html): Customize SMS delivery process. (747 words)
- [Role management actions - SuperTokens Docs](/content/docs/additional-verification/user-roles/role-management-actions/index.html): Discover how to perform common actions that can be use to manage roles and permissions. (1,872 words)
- [Scalability - SuperTokens Docs](/content/docs/deployment/scalability/index.html): Learn how SuperTokens scales to handle millions of users and requests efficiently. (923 words)
- [Configure Email Delivery - SuperTokens Docs](/content/docs/platform-configuration/email-delivery/index.html): Send SuperTokens emails through the default service, your own SMTP server and domain, or a custom delivery implementation. (474 words)
- [OTP for specific users - SuperTokens Docs](/content/docs/additional-verification/mfa/email-sms-otp/otp-for-opt-in-users/index.html): Implement MFA policy for specific users using OTP via email or SMS based on defined criteria. (1,143 words)
- [Session Verification - SuperTokens Docs](/content/docs/integrations/aws-lambda/session-verification/index.html): Verify user sessions when integrating SuperTokens with AWS Lambda. (1,050 words)
- [Hasura - SuperTokens Docs](/content/docs/integrations/hasura/index.html): Learn how to use SuperTokens with Hasura (947 words)
- [User Creation - SuperTokens Docs](/content/docs/migration/legacy/account-creation/user-creation/index.html): Open Source User Authentication (725 words)
- [SDK Integration Guide - SuperTokens Docs](/content/docs/migration/rownd/sdk-integration-guide/index.html): Configure the SuperTokens Rownd backend plugin and frontend SDKs. (926 words)
- [Implement recovery codes - SuperTokens Docs](/content/docs/additional-verification/mfa/backup-codes/index.html): Implement backup codes for account recovery by customizing SuperTokens SDKs for MFA users. (1,349 words)
- [Client Credentials Flow - SuperTokens Docs](/content/docs/authentication/m2m/client-credentials/index.html): Configure OAuth2 client credentials flow for microservices authentication and access token verification. (1,207 words)
- [Set Up Passkey Authentication - SuperTokens Docs](/content/docs/authentication/passkeys/initial-setup/index.html): Integrate standalone WebAuthn passkey authentication with the frontend and backend SDKs, Session recipe, and authentication routes. (999 words)
- [Quickstart Guide - SuperTokens Docs](/content/docs/integrations/aws-lambda/quickstart-guide/index.html): Learn how to integrate SuperTokens with AWS Lambda (1,268 words)
- [Embed the pre-built UI component - SuperTokens Docs](/content/docs/additional-verification/mfa/embed-the-prebuilt-ui/index.html): Embed and customize a prebuilt MFA UI component. (887 words)
- [Initial Setup - SuperTokens Docs](/content/docs/additional-verification/user-roles/initial-setup/index.html): Learn how to initialize and configure user roles with SuperTokens. (992 words)
- [SAML - SuperTokens Docs](/content/docs/authentication/enterprise/saml/index.html): Add SAML authentication to your application (1,107 words)
- [Protect frontend and backend routes - SuperTokens Docs](/content/docs/additional-verification/mfa/protect-routes/index.html): Protect frontend and backend routes using SuperTokens Session Tokens and Multi-Factor Authentication (MFA). (831 words)
- [1. Configuration - SuperTokens Docs](/content/docs/integrations/nextjs/app-directory/init/index.html): Configure SuperTokens for authentication in your Next.js app with frontend and backend setup. (638 words)
- [Session Invalidation - SuperTokens Docs](/content/docs/post-authentication/session-management/session-invalidation/index.html): Learn how to handle session expiry, implement sign out, and revoke sessions across different programming languages and frameworks. (793 words)
- [NestJS - SuperTokens Docs](/content/docs/integrations/nestjs/index.html): Integrate SuperTokens with NestJS backend, covering modules, services, middleware, and session management. (622 words)
- [Work with multiple API endpoints - SuperTokens Docs](/content/docs/post-authentication/session-management/advanced-workflows/multiple-api-endpoints/index.html): Configure sessions for multiple API endpoints using cookie and header-based authentication. (690 words)
- [Implement step-up authentication - SuperTokens Docs](/content/docs/additional-verification/mfa/step-up-auth/index.html): Implement step-up authentication using SuperTokens MFA recipe. (835 words)
- [Protect frontend and backend routes - SuperTokens Docs](/content/docs/additional-verification/user-roles/protecting-routes/index.html): Protect frontend and backend routes using SuperTokens session access tokens and role-based validation. (649 words)
- [Session Migration - SuperTokens Docs](/content/docs/migration/session-migration/index.html): Migrate user sessions from your previous authentication provider to SuperTokens using backend and frontend changes. (869 words)
- [CAPTCHA - SuperTokens Docs](/content/docs/additional-verification/captcha/index.html): Use the plugin to add CAPTCHA to your authentication flow. (682 words)
- [Embed the UI in a page - SuperTokens Docs](/content/docs/additional-verification/email-verification/embed-in-page/index.html): Embed the email verification UI in a different page. (545 words)
- [Customize the pre-built UI - SuperTokens Docs](/content/docs/additional-verification/email-verification/changing-style/index.html): Update SuperTokens component styles using CSS for customized UI appearance. (680 words)
- [Hooks and overrides - SuperTokens Docs](/content/docs/additional-verification/email-verification/hooks-and-overrides/index.html): Add custom logic in the email verification flow by overriding the SuperTokens APIs. (393 words)
- [User banning - SuperTokens Docs](/content/docs/post-authentication/user-management/user-banning/index.html): Implement a user banning feature using plugins (782 words)
- [Passkeys as an MFA Factor - SuperTokens Docs](/content/docs/additional-verification/mfa/webauthn-setup/index.html): Require WebAuthn passkeys as a second authentication factor after email/password, social login, or another first factor. (787 words)
- [Multiple frontend domains with a common backend - SuperTokens Docs](/content/docs/authentication/unified-login/quickstart-guides/multiple-frontends-with-a-single-backend/index.html): Implement OAuth2 authentication for multiple frontend domains using a shared backend service. (785 words)
- [API Keys - SuperTokens Docs](/content/docs/platform-configuration/supertokens-core/api-keys/index.html): Require API keys for backend SDK requests to a self-hosted Core and rotate multiple keys without downtime. (696 words)
- [Account Migration - SuperTokens Docs](/content/docs/migration/account-migration/index.html): Migrate your users from a legacy authentication provider to SuperTokens. (744 words)
- [MCP Authentication - SuperTokens Docs](/content/docs/authentication/ai-authentication/index.html): Authenticate MCP server actions using the SuperTokens MCP plugin. (512 words)
- [Tenant discovery - SuperTokens Docs](/content/docs/authentication/enterprise/tenant-discovery/index.html): Automatically discover and route users to appropriate tenants based on their email domains (596 words)
- [Reuse website login for desktop and mobile apps - SuperTokens Docs](/content/docs/authentication/unified-login/quickstart-guides/reuse-website-login/index.html): Implement web authentication for desktop and mobile apps using OAuth 2.0. (1,412 words)
- [Session verification during server-side rendering - SuperTokens Docs](/content/docs/additional-verification/session-verification/ssr/index.html): Enable secure session verification during server-side rendering with cookie-based sessions. (942 words)
- [Customization - SuperTokens Docs](/content/docs/authentication/passkeys/customization/index.html): Open Source User Authentication (490 words)
- [Hooks and overrides - SuperTokens Docs](/content/docs/additional-verification/mfa/hooks-and-overrides/index.html): Configure your application for multi-factor authentication with account linking and tenant-specific configurations. (822 words)
- [Custom providers - SuperTokens Docs](/content/docs/authentication/social/custom-providers/index.html): Add custom authentication providers to SuperTokens  (588 words)
- [Add custom claims in tokens - SuperTokens Docs](/content/docs/authentication/unified-login/add-custom-claims-in-tokens/index.html): Add custom claims to OAuth2 access and ID tokens using overrides (298 words)
- [Access Session Data - SuperTokens Docs](/content/docs/post-authentication/session-management/access-session-data/index.html): Learn how to access session data including JWT tokens, tenant IDs, and user sessions across different programming languages and frameworks. (527 words)
- [Protect frontend routes - SuperTokens Docs](/content/docs/additional-verification/session-verification/protect-frontend-routes/index.html): Protect frontend routes by requiring user sessions and verifying session claims for access control. (511 words)
- [Switch between cookie and header-based sessions - SuperTokens Docs](/content/docs/post-authentication/session-management/switch-between-cookies-and-header-authentication/index.html): Switch between cookie and header-based sessions for secure token management in SuperTokens. (500 words)
- [Add multiple clients for the same provider - SuperTokens Docs](/content/docs/authentication/social/add-multiple-clients-for-the-same-provider/index.html): Configure multiple client IDs for social login providers in web and mobile applications. (405 words)
- [Verify tokens - SuperTokens Docs](/content/docs/authentication/unified-login/verify-tokens/index.html): Verify OAuth2 access tokens locally or with database-backed validation. (358 words)
- [Using Next.js Proxy - SuperTokens Docs](/content/docs/integrations/nextjs/app-directory/protecting-backend/session-verification-middleware/index.html): Implement session verification in Next.js Proxy to manage user authentication and retrieve user IDs. (346 words)
- [6. Making requests from Server Components - SuperTokens Docs](/content/docs/integrations/nextjs/app-directory/server-components-requests/index.html): Learn to make API requests from server components using access tokens in Next.js. (568 words)
- [Introduction - SuperTokens Docs](/content/docs/authentication/unified-login/introduction/index.html): Authenticate multiple applications using SuperTokens and OAuth2 for unified login across platforms. (399 words)
- [Important concepts - SuperTokens Docs](/content/docs/authentication/passkeys/important-concepts/index.html): Open Source User Authentication (691 words)
- [4. Protecting a website route - SuperTokens Docs](/content/docs/integrations/nextjs/pages-directory/protecting-route/index.html): Protect website routes by requiring user authentication and redirecting unauthenticated users to login. (335 words)
- [Manage apps - SuperTokens Docs](/content/docs/authentication/enterprise/manage-apps/index.html): Create and manage multiple apps within a SuperTokens integration. (815 words)
- [Share sessions across sub domains - SuperTokens Docs](/content/docs/post-authentication/session-management/share-session-across-sub-domains/index.html): Configure SuperTokens to share sessions across multiple subdomains. (273 words)
- [GraphQL - SuperTokens Docs](/content/docs/integrations/graphql/index.html): Set up backend session verification in GraphQL resolvers using SuperTokens for user authentication. (792 words)
- [Important concepts - SuperTokens Docs](/content/docs/additional-verification/mfa/important-concepts/index.html): Understand SuperTokens auth factor IDs, completion status, and multi-factor authentication setup. (859 words)
- [Migration Steps - SuperTokens Docs](/content/docs/migration/rownd/migration-steps/index.html): Understand the Rownd to SuperTokens migration process. (780 words)
- [1. Configuration - SuperTokens Docs](/content/docs/integrations/nextjs/pages-directory/init/index.html): Configure SuperTokens for authentication in your Next.js app with frontend and backend setup. (338 words)
- [User metadata - SuperTokens Docs](/content/docs/post-authentication/user-management/user-metadata/index.html): Store and manage user metadata using the backend SDK's UserMetadata recipe. (364 words)
- [5b. Session verification in getServerSideProps - SuperTokens Docs](/content/docs/integrations/nextjs/pages-directory/protecting-backend/in-ssr/index.html): Verify user sessions in Next.js using `getServerSideProps` for secure route access. (461 words)
- [AppSync integration - SuperTokens Docs](/content/docs/integrations/aws-lambda/appsync-integration/index.html): Integrate SuperTokens with AppSync through an API Gateway Lambda authorizer. (396 words)
- [Multi-Factor Authentication - SuperTokens Docs](/content/docs/additional-verification/mfa/introduction/index.html): Add email or SMS OTP, TOTP, or WebAuthn passkeys as MFA factors and require step-up authentication for sensitive actions. (379 words)
- [Work with scopes - SuperTokens Docs](/content/docs/authentication/unified-login/work-with-scopes/index.html): Manage OAuth2 scopes, request specific scopes, and override granted scopes during authentication. (303 words)
- [2. Showing the Login UI - SuperTokens Docs](/content/docs/integrations/nextjs/app-directory/setting-up-frontend/index.html): Implement a login UI using SuperTokens in a Next.js application. (220 words)
- [Introduction - SuperTokens Docs](/content/docs/authentication/m2m/introduction/index.html): Authenticate microservices using SuperTokens with the OAuth2 Client Credentials Flow. (329 words)
- [Adding a session guard to each API route - SuperTokens Docs](/content/docs/integrations/nextjs/app-directory/protecting-backend/session-verification-session-guard/index.html): Implement session guards for API routes to manage user authentication and session validation. (218 words)
- [Add SSL via NGINX - SuperTokens Docs](/content/docs/platform-configuration/supertokens-core/add-ssl-via-nginx/index.html): Set up SSL for secure SuperTokens Core connections using NGINX as a reverse proxy. (219 words)
- [Vercel - SuperTokens Docs](/content/docs/integrations/vercel/index.html): Learn how to integrate SuperTokens with Vercel  (184 words)
- [2. Showing Login UI - SuperTokens Docs](/content/docs/integrations/nextjs/pages-directory/setting-up-frontend/index.html): Implement a login UI using SuperTokens in a Next.js application. (211 words)
- [Introduction - SuperTokens Docs](/content/docs/additional-verification/user-roles/introduction/index.html): Manage user roles and permissions with SuperTokens. (135 words)
- [Step 2. User Data Migration - SuperTokens Docs](/content/docs/migration/legacy/data-migration/index.html): Open Source User Authentication (136 words)
- [Introduction - SuperTokens Docs](/content/docs/additional-verification/email-verification/introduction/index.html): Use email verification to ensure user authenticity and protect application routes. (132 words)
- [7. Next steps - SuperTokens Docs](/content/docs/integrations/nextjs/app-directory/next-steps/index.html): Set up SuperTokens core for your app using managed service or self-hosting options. (59 words)
- [6. Next steps - SuperTokens Docs](/content/docs/integrations/nextjs/pages-directory/next-steps/index.html): Set up SuperTokens core and database for your app with managed or self-hosted options. (61 words)
- [Protect backend routes - SuperTokens Docs](/content/docs/additional-verification/session-verification/protect-api-routes/index.html): Protect backend routes with SuperTokens session middleware and session verification APIs. (9,833 words)
- [Set Up Social Login - SuperTokens Docs](/content/docs/authentication/social/initial-setup/index.html): Integrate Google, Apple, and other OAuth providers with ThirdParty and Session recipes, callback routes, and prebuilt or custom UI. (5,498 words)
- [3. Adding auth APIs - SuperTokens Docs](/content/docs/integrations/nextjs/pages-directory/setting-up-backend/index.html): Add authentication APIs to your backend using SuperTokens for user sign-in and sign-up. (231 words)
- [Password hashing - SuperTokens Docs](/content/docs/authentication/email-password/password-hashing/index.html): Learn about the password hashing algorithms used by SuperTokens and how to customize and calibrate them. (1,213 words)
- [Legacy SAML - SuperTokens Docs](/content/docs/authentication/enterprise/legacy-saml/index.html): Learn how SAML facilitates secure information exchange between authentication servers and client applications. (1,242 words)
- [Implement subdomain login - SuperTokens Docs](/content/docs/authentication/enterprise/subdomain-login/index.html): Authenticate users across different tenants through different subdomains. (751 words)
- [WebSocket session verification - SuperTokens Docs](/content/docs/additional-verification/session-verification/with-websocket/index.html): Authenticate WebSocket connections with SuperTokens access tokens and enforce connection-lifetime checks. (444 words)
- [Introduction - SuperTokens Docs](/content/docs/authentication/enterprise/introduction/index.html): Explore how you can implement enterprise authentication flows with SuperTokens. (454 words)
- [Passwordless Authentication - SuperTokens Docs](/content/docs/authentication/passwordless/introduction/index.html): Authenticate users with magic links or one-time passwords delivered through email or SMS, using prebuilt or custom UI. (171 words)
- [Customize the Sign Up Form - SuperTokens Docs](/content/docs/authentication/email-password/customize-the-sign-up-form/index.html): Customize the sign up form by adding new fields or modifying existing ones. (1,422 words)
- [Protect frontend and backend routes - SuperTokens Docs](/content/docs/additional-verification/email-verification/protecting-routes/index.html): Protect API and website routes by implementing email verification checks for secure access. (552 words)
- [Post Login Redirect - SuperTokens Docs](/content/docs/post-authentication/post-login-redirect/index.html): Change post-login redirection paths and configure login screen behavior using SuperTokens. (634 words)
- [Manual actions - SuperTokens Docs](/content/docs/additional-verification/email-verification/manual-actions/index.html): See how you can directly generate email verification links and set emails as verified through manual actions. (539 words)
- [Implement username login - SuperTokens Docs](/content/docs/authentication/email-password/implement-username-login/index.html): Enable username login by replacing email with username in the SuperTokens authentication flow. (1,814 words)
- [Customize the Magic Link - SuperTokens Docs](/content/docs/authentication/passwordless/customize-the-magic-link/index.html): See how to change the magic link or how to generate it manually (603 words)
- [Overview - SuperTokens Docs](/content/docs/integrations/overview/index.html): Explore different integration guides that present how to use SuperTokens with different platforms and frameworks. (35 words)
- [Important concepts - SuperTokens Docs](/content/docs/authentication/enterprise/important-concepts/index.html): Understand multi-tenant architecture with SuperTokens (899 words)
- [Customize the One-Time Password (OTP) - SuperTokens Docs](/content/docs/authentication/passwordless/customize-the-otp/index.html): Configure OTP by changing the format or by modifying the token duration (378 words)
- [Tenant management - SuperTokens Docs](/content/docs/authentication/enterprise/tenant-management-plugin/index.html): Use the tenant management plugin for an out-of-the-box admin experience (764 words)
- [Built-in providers - SuperTokens Docs](/content/docs/authentication/social/built-in-providers-config/index.html): Configure single or multi-tenant login/SSO with built-in provider settings. (4,162 words)
- [Customize the Sign In form - SuperTokens Docs](/content/docs/authentication/email-password/customize-the-sign-in-form/index.html): Customize form fields in the sign in component by modifying labels, placeholders, default values, and error messages. (495 words)
- [Implement common domain login - SuperTokens Docs](/content/docs/authentication/enterprise/common-domain-login/index.html): Authenticate users across different tenants through a common domain. (879 words)
- [docs/attackprotectionsuite/introduction/index.html](/content/docs/attackprotectionsuite/introduction/index.html) (339 words)
- [Passkeys vs. Passwords vs. Magic Links: Choosing the Right Authentication Method](/content/blog/passkeys-vs-passwords-vs-magic-links/index.html): Passwords, magic links, OTP, and passkeys compared on phishing resistance, UX friction, and recovery, with a framework for picking one. (1,710 words)
- [Overview - SuperTokens Docs](/content/docs/authentication/overview/index.html): Explore various user authentication methods with SuperTokens, including email/password, social login, and more. (163 words)
- [Integrate with AI - SuperTokens Docs](/content/docs/integrate-with-ai/index.html): Use SuperTokens documentation directly in AI chat and coding tools. (287 words)
- [Implement a custom invite flow - SuperTokens Docs](/content/docs/authentication/social/custom-invite-flow/index.html): Implement a list of approved email addresses for third-party sign-ups using the SuperTokens user metadata recipe. (1,111 words)
- [Supabase - SuperTokens Docs](/content/docs/integrations/supabase/index.html): Integrate SuperTokens with Supabase in a Next.js app for secure user data management. (1,572 words)
- [Implement invite link based sign up - SuperTokens Docs](/content/docs/authentication/passwordless/invite-link-flow/index.html): Discover how to implement an invite based sign up flow with the passwordless recipe. (1,355 words)
- [Set Up Email/Password Authentication - SuperTokens Docs](/content/docs/authentication/email-password/initial-setup/index.html): Add email and password authentication to your frontend and backend, then prepare the integration for production. (8,307 words)
- [Email/Password Authentication - SuperTokens Docs](/content/docs/authentication/email-password/introduction/index.html): Integrate email/password sign-up, sign-in, sessions, password reset, and optional email verification with prebuilt or custom UI. (264 words)
- [References - SuperTokens Docs](/content/docs/references/index.html): Explore SuperTokens concepts, APIs, and advanced customization options for authentication integration. (132 words)
- [Tenant actions - SuperTokens Docs](/content/docs/authentication/enterprise/manage-tenants/index.html): Discover different APIs that can help you work with tenants. (754 words)
- [How to Implement Passkey Authentication in Next.js With SuperTokens](/content/blog/implement-passkeys-nextjs/index.html): Build a complete, self-hosted passkey flow in a Next.js App Router app with SuperTokens: registration, authentication, cross-device, recovery, and migration. (2,635 words)
- [How Do I Add CAPTCHA to My Login Page?](/content/blog/captcha-supertokens/index.html):  Learn how to add CAPTCHA to login and signup pages, protect your app from bots, and see how SuperTokens makes it simple. (3,093 words)
- [Password managers - SuperTokens Docs](/content/docs/authentication/email-password/password-managers/index.html): Ensure password managers detect authentication fields by disabling shadow DOM in your application. (128 words)
- [Social Login - SuperTokens Docs](/content/docs/authentication/social/introduction/index.html): Authenticate users with built-in or custom third-party identity providers using prebuilt UI or custom SDK interfaces. (160 words)
- [Password reset - SuperTokens Docs](/content/docs/authentication/email-password/password-reset/index.html): Learn how the password reset functionality works (541 words)
- [Passwordless Setup for Magic Link Login and OTPs - SuperTokens Docs](/content/docs/authentication/passwordless/initial-setup/index.html): Set up magic link login with the SuperTokens Passwordless recipe, or use email and SMS OTPs with prebuilt or custom UI. (476 words)
- [docs/thirdpartyemailpassword/common-customizations/disable-sign-up/overview/index.html](/content/docs/thirdpartyemailpassword/common-customizations/disable-sign-up/overview/index.html) (408 words)
- [Passkey Authentication - SuperTokens Docs](/content/docs/authentication/passkeys/introduction/index.html): Use WebAuthn passkeys as standalone passwordless authentication with biometrics, security keys, or device credentials. (224 words)
- [Hooks and overrides - SuperTokens Docs](/content/docs/authentication/passwordless/hooks-and-overrides/index.html): Add custom logic in the authentication flow by overriding the SuperTokens APIs. (799 words)
- [Hooks and overrides - SuperTokens Docs](/content/docs/authentication/email-password/hooks-and-overrides/index.html): Add custom logic in the authentication flow by overriding the SuperTokens APIs. (623 words)
- [OTP required for all users - SuperTokens Docs](/content/docs/additional-verification/mfa/email-sms-otp/otp-for-all-users/index.html): Implement a multi-factor authentication policy requiring all users to complete an OTP challenge. (624 words)
- [dashboard/index.html](/content/dashboard/index.html) (62 words)
- [call-user/index.html](/content/call-user/index.html) (116 words)
- [Initial setup - SuperTokens Docs](/content/docs/additional-verification/mfa/initial-setup/index.html): Configure your application for multi-factor authentication with account linking and tenant-specific configurations. (9,405 words)
- [Initial setup - SuperTokens Docs](/content/docs/additional-verification/attack-protection-suite/initial-setup/index.html): Set up Attack Protection Suite in your **SuperTokens** integration (7,706 words)
- [Cheapest Auth0 Alternatives (2026): Open Source and Low-Cost Picks](/content/blog/cheapest-auth-alternatives/index.html): Looking for the cheapest Auth0 alternatives? See free and low-cost options (OSS + managed), pricing gotchas, and when SuperTokens is the better fit. (2,582 words)
- [Initial Setup - SuperTokens Docs](/content/docs/additional-verification/email-verification/initial-setup/index.html): Enable email verification to ensure user authenticity and protect application routes. (561 words)
- [FIDO2 vs U2F 5 Key Differences Explained](/content/blog/fideo2-and-u2f-differences/index.html): Understand the differences between FIDO2 and U2F. Learn how each works, where they apply, and which authentication standard to choose. (1,294 words)
- [7 Leading Auth0 Alternatives for Large Enterprises in 2026](/content/blog/auth0-alternatives-for-large-enterprises/index.html): This blog aims to highlight the leading enterprise-ready Auth0 alternatives—what they do best, where they trade off, and how to choose based on your operational model and risk posture. (1,508 words)
- [Configure email and SMS behavior - SuperTokens Docs](/content/docs/authentication/passwordless/configure-email-and-sms-behavior/index.html): Customize how the email and SMS are sent in your frontend application. (518 words)
- [How to Migrate from Auth0 Securely and Efficiently](/content/blog/migrate-from-auth0/index.html): Learn how to migrate from Auth0 to SuperTokens using lazy, automatic, or trickle migration. Includes secure export steps, pricing insights, and implementation tips. (2,817 words)
- [Add MFA to React Fast with SuperTokens](/content/blog/mfa-react/index.html): Secure your React app with multi-factor authentication in minutes. Learn MFA options, setup steps, and best practices using SuperTokens. (2,650 words)
- [Clerk Pricing - The Complete Guide](/content/blog/clerk-pricing-the-complete-guide/index.html): Clerk pricing explained: the free 50K MRU tier, Pro and Business plans, per-user and per-organization overage rates, add-ons, worked cost examples, and how it compares with Auth0 and SuperTokens. (1,569 words)
- [Frontegg vs Auth0 vs FusionAuth – Which Authentication Platform Fits You?](/content/blog/frontegg-vs-auth0-vs-fusionauth/index.html): undefined (2,133 words)
- [A Comprehensive Guide to SSO Implementation](/content/blog/sso-implementation/index.html): This blog explores the benefits and functionalities of Single Sign-On (SSO), highlighting how it simplifies user authentication, enhances security, and integrates with modern identity management systems. It also covers how open standards like OAuth 2.0 and OIDC enable seamless access to applications, including the use of social logins from services like Google, Facebook, and Twitter. (834 words)
- [Authentication for AI Agents: Tokens, Tool Calls, and Human-in-the-Loop](/content/blog/auth-for-ai-agents/index.html): Secure AI agents with scoped tokens, DPoP, tool-level policies, and human approvals. (3,131 words)
- [What Are Passkeys? A Developer's Guide to WebAuthn and FIDO2](/content/blog/what-are-passkeys/index.html): A developer's guide to passkeys: what they are cryptographically, how WebAuthn and FIDO2 fit together, and where the real trade-offs live. (1,407 words)
- [What Is Better Auth and Who's It For?](/content/blog/better-auth/index.html): undefined (1,029 words)
- [Top Open Source SSO Providers in 2026: Keycloak, authentik, Authelia, ZITADEL and More](/content/blog/sso-providers/index.html): Compare the best open source SSO providers in 2026: Keycloak, authentik, Authelia, ZITADEL, Apereo CAS, Ory and SuperTokens. Licenses, supported protocols, pricing and which to choose. (2,125 words)
- [Progressive profiling - SuperTokens Docs](/content/docs/post-authentication/user-management/progressive-profiling/index.html): Gradually collect user information through customizable multi-step forms using the progressive profiling plugin (1,036 words)
- [4. Checking for sessions in frontend routes - SuperTokens Docs](/content/docs/integrations/nextjs/app-directory/protecting-route/index.html): Learn to protect frontend routes by checking user sessions and handling session-related events. (1,082 words)
- [Add passwords to an existing account - SuperTokens Docs](/content/docs/post-authentication/account-linking/add-passwords-to-an-existing-account/index.html): Add a new password to an existing account using the account linking feature. (1,218 words)
- [Step 3. Session Migration - SuperTokens Docs](/content/docs/migration/legacy/session-migration/index.html): Open Source User Authentication (824 words)
- [legal/privacy-policy/index.html](/content/legal/privacy-policy/index.html) (1,488 words)
- [How to Migrate from Clerk Efficiently and Safely](/content/blog/clerk-migration/index.html):  Step-by-step guide on migrating from Clerk to SuperTokens—covering trickle, bulk import, export scripts, sessions, and security. (2,029 words)
- [Require TOTP for specific users - SuperTokens Docs](/content/docs/additional-verification/mfa/totp/totp-for-opt-in-users/index.html): Implement a TOTP-based MFA policy for specific users based on customizable criteria. (965 words)
- [Step 4. MFA migration - SuperTokens Docs](/content/docs/migration/legacy/mfa-migration/index.html): Open Source User Authentication (28 words)
- [Claims validation - SuperTokens Docs](/content/docs/additional-verification/session-verification/claim-validation/index.html): Validate your resources based on claims that get attached to the session. (1,050 words)
- [SuperTokens and Rownd Announce Transition of Rownd Authentication Customers](/content/blog/supertoknes-rownd-business-line-acquisition/index.html): SuperTokens and Rownd announce that SuperTokens has acquired the Rownd Authentication business line (447 words)
- [Auth0 Open Source (2026): What's Free and Top OSS Alternatives](/content/blog/auth0-open-source/index.html): Is Auth0 open source? What's actually OSS, and which open-source Auth0 alternatives (Keycloak, Ory, SuperTokens) fit your stack in 2026? (1,399 words)
- [SCIM Provisioning Explained: The Definitive Guide for Enterprise SaaS (2026)](/content/blog/scim-provisioning-explained/index.html): Learn SCIM provisioning, implementation, edge cases, pricing impact, and how to build it with SuperTokens. (1,061 words)
- [docs/passwordless/pre-built-ui/setup/core/with-docker/index.html](/content/docs/passwordless/pre-built-ui/setup/core/with-docker/index.html) (1,178 words)
- [SuperTokens vs Auth0 Comparison](/content/supertokens-vs-auth0/index.html): Compare SuperTokens and Auth0 authentication solutions - features, pricing, and developer experience. (545 words)
- [Mastering Session Security: SuperTokens’ Attack Mitigation](/content/blog/session-hijacking-fixation/index.html): Stop session hijacking and fixation with a layered plan: timeouts, cookie flags, rotation, and SuperTokens’ theft detection for secure authentication sessions. (2,207 words)
- [What Is Passwordless Authentication? Methods, Benefits and Challenges](/content/blog/what-is-passwordless-authentication/index.html): What is passwordless authentication? Solve login challenges, explore methods, benefits, and tools for secure implementations. (2,023 words)
- [SuperTokens: Stacker case study](/content/customers/stacker-hq/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (736 words)
- [supertokens_flutter - Dart API docs](/content/docs/flutter/index.html): supertokens_flutter API docs, for the Dart programming language. (407 words)
- [Migrate your Auth | SuperTokens](/content/migration/index.html): Migrate your auth without disrupting your users. White-gloved support from our core engineering team. (586 words)
- [security/index.html](/content/security/index.html) (90 words)
- [How to Ban Users in Your Web App Using SuperTokens](/content/blog/how-to-ban-users/index.html): Learn how to ban or suspend users in your web app with SuperTokens. (1,367 words)
- [Contact Sales | SuperTokens](/content/consultancy/index.html): Find the right plan and pricing for your business. We help evaluate building in-house vs using a 3rd party to help with RBAC, CSRF, JWT's and more. (94 words)
- [SAML vs SSO: What's the Difference, How They Work Together, and Which One You Actually Need](/content/blog/saml-vs-sso/index.html): SAML and SSO aren't the same thing. Learn the key differences, how SAML-based SSO works step by step, when to use SAML vs OIDC, and how to implement it with SuperTokens. (3,564 words)
- [docs/passwordless/introduction/index.html](/content/docs/passwordless/introduction/index.html) (167 words)
- [The Hidden Costs of Building Your Own Authentication Stacks](/content/blog/the-hidden-cost-of-building-your-own-auth-stacks/index.html): Building authentication in-house drains time, money, and focus. See the hidden costs and why SuperTokens slashes them. (2,378 words)
- [Best Self-Hosted Authentication Solutions in 2026](/content/blog/self-hosted-auth-solutions-in-2026/index.html): Compare the leading self-hosted authentication platforms for 2026 — scalability, control, cost, and developer-experience highlight how SuperTokens stands out. (2,334 words)
- [Create Responsive, Accessible Forms with React Bootstrap](/content/blog/react-bootstrap-forms/index.html): A step-by-step guide to building, validating, and styling forms in React using the react-bootstrap library. (2,414 words)
- [Secure Multi-Tenant Authentication: SaaS RBAC with SuperTokens](/content/blog/secure-multi-tenant-auth/index.html): For B2B SaaS and platform builders shipping tenant-aware authentication, SSO, and least-privilege access with open-source ergonomics and enterprise guarantees. (2,443 words)
- [Introducing Evergreen Hosting: Automatic Upgrades for SuperTokens](/content/blog/evergreen-hosting-announcement/index.html): SuperTokens managed instances will now automatically receive stable upgrades with zero downtime, instant rollback, and continuous monitoring (825 words)
- [What Is the WebAuthn API (and How to Use It in Your Auth Flow)](/content/blog/webauthin-api/index.html): Learn how the WebAuthn API enables passwordless, phishing-resistant login. Get step-by-step code and how to plug it into your auth stack. (1,183 words)
- [OAuth Flows Explained: How They Work and When to Use Them](/content/blog/oauth-flows/index.html): Understand different OAuth flows, when to use each, and how SuperTokens supports secure OAuth integration. (2,464 words)
- [docs/additional-verification/mfa/totp/totp-for-all-users/index.html](/content/docs/additional-verification/mfa/totp/totp-for-all-users/index.html) (400 words)
- [Implement anonymous sessions - SuperTokens Docs](/content/docs/post-authentication/session-management/advanced-workflows/anonymous-session/index.html): Track user actions with anonymous sessions, create and verify JWTs, and transfer data post-login. (1,030 words)
- [Multiple frontend domains with separate backends - SuperTokens Docs](/content/docs/authentication/unified-login/quickstart-guides/multiple-frontends-with-separate-backends/index.html): Set up multiple frontend domains with separate backends using OAuth2 authentication. (693 words)
- [Filter requests based on IP address - SuperTokens Docs](/content/docs/platform-configuration/supertokens-core/ip-allow-deny/index.html): Configure SuperTokens to allow or deny requests based on specific IP addresses for enhanced security. (264 words)
- [Implement allow list based sign up - SuperTokens Docs](/content/docs/authentication/passwordless/allow-list-flow/index.html): Discover how to implement an allow list based sign up flow with the passwordless recipe. (1,337 words)
- [Overview - SuperTokens Docs](/content/docs/migration/overview/index.html): Get a high-level overview of the migration process. (208 words)
- [Introduction - SuperTokens Docs](/content/docs/additional-verification/attack-protection-suite/introduction/index.html): Enhance application security with automatic threat detection SuperTokens (339 words)
- [Testing SSO implementations](/content/blog/testing-sso-implementation/index.html): A guide into single sign-on implementation and how to perform sso testing for authentication and login (935 words)
- [supertokens_python.async_to_sync_wrapper API documentation](/content/docs/python/latest/async_to_sync_wrapper-html.html): Documentation for supertokens_python - SuperTokens Python SDK (272 words)
- [Initial setup - SuperTokens Docs](/content/docs/authentication/enterprise/initial-setup/index.html): Create your first tenant and configure authentication on it. (541 words)
- [Legacy Flow - SuperTokens Docs](/content/docs/authentication/m2m/legacy-flow/index.html): Guide for implementing custom JWT authentication between microservices using SuperTokens Core. (1,425 words)
- [OpenTelemetry Integration - SuperTokens Docs](/content/docs/deployment/telemetry/index.html): Add OpenTelemetry logging to all SuperTokens APIs and function calls using the plugin (595 words)
- [Rate limit policy - SuperTokens Docs](/content/docs/deployment/rate-limits/index.html): Understand and implement SuperTokens rate limit policies for managed and self-hosted services. (397 words)
- [CLI - SuperTokens Docs](/content/docs/platform-configuration/supertokens-core/cli/index.html): Learn to use SuperTokens CLI for starting, listing, stopping, and uninstalling instances. (265 words)
- [Top 3 Auth0 alternatives: Auth0 vs Okta vs Cognito vs SuperTokens [2025]](/content/blog/auth0-alternatives-auth0-vs-okta-vs-cognito-vs-supertokens.html): Compare leading authentication platforms like Auth0, Okta, Cognito, and SuperTokens. Identify the best solution for your authentication needs. (1,074 words)
- [legal/terms-and-conditions/index.html](/content/legal/terms-and-conditions/index.html) (815 words)
- [Quickstart Guide - SuperTokens Docs](/content/docs/quickstart/index.html): Add SuperTokens authentication to your frontend and backend, then prepare the integration for production. (8,305 words)
- [Customize error handling - SuperTokens Docs](/content/docs/post-authentication/session-management/advanced-workflows/customize-error-handling/index.html): Customize errors thrown by the Session recipe in your SuperTokens integration. (1,015 words)
- [docs/contribute/introduction/index.html](/content/docs/contribute/introduction/index.html) (322 words)
- [SuperTokens JWT Decoder](/content/jwt-encoder-decoder/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (570 words)
- [Profile Management - SuperTokens Docs](/content/docs/post-authentication/user-management/user-profile/index.html): Add comprehensive user profile management with customizable form fields and account information display using the profile details plugin (836 words)
- [Allow users to update their data - SuperTokens Docs](/content/docs/post-authentication/user-management/allow-users-to-update-their-data/index.html): Enable users to change their email or password. (442 words)
- [Disable frontend network interceptors - SuperTokens Docs](/content/docs/post-authentication/session-management/advanced-workflows/disable-frontend-interceptors/index.html): Disable frontend network interceptors to manage session tokens and request headers manually in projects. (453 words)
- [Implement user impersonation - SuperTokens Docs](/content/docs/post-authentication/session-management/advanced-workflows/user-impersonation/index.html): Enable user impersonation for testing and support by creating an admin-protected API endpoint. (621 words)
- [Usage inside an iframe - SuperTokens Docs](/content/docs/post-authentication/session-management/advanced-workflows/in-iframe/index.html): Embed your website in an iframe with secure session management and custom storage handlers. (344 words)
- [SuperTokens: Qloo case study](/content/customers/qloo/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (598 words)
- [Engineering at SuperTokens | Open Source Auth](/content/engineering/index.html): Discover our engineering culture, tech stack, and how we're building the future of authentication. (604 words)
- [SuperTokens Community](/content/community/index.html): Join the SuperTokens community and get involved in the open source authentication project. (502 words)
- [Introduction - SuperTokens Docs](/content/docs/post-authentication/user-management/introduction/index.html): Learn how to manage users in SuperTokens  (146 words)
- [Introduction - SuperTokens Docs](/content/docs/references/plugins/introduction/index.html): Extend SuperTokens functionality with official plugins for enhanced authentication features. (163 words)
- [supertokens-auth-react](/content/docs/auth-react/index.html): Documentation for supertokens-auth-react (20 words)
- [SuperTokensIOS  Reference](/content/docs/ios/index.html) (65 words)
- [SuperTokens Launch Weeks: New Auth Features & Updates](/content/launches/index.html): Explore SuperTokens' latest auth features, security updates, and integrations from Launch Week. Get cutting-edge authentication solutions for modern apps. (443 words)
- [com.supertokens.session (Documentation for Android 0.5.3 b1)](/content/docs/android/index.html) (261 words)
- [supertokens_python API documentation](/content/docs/python/index.html): Documentation for supertokens_python - SuperTokens Python SDK (751 words)
- [SuperTokens: Curology case study](/content/customers/curology/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (842 words)
- [docs/community/apis/index.html](/content/docs/community/apis/index.html) (135 words)
- [A Guide to Implementing Passwordless Login](/content/blog/a-guide-to-implementing-passwordless-login/index.html): Passwordless authentication is becoming an increasingly popular choice for developers. In this guide we will go over how you can implement passwordless authentication in your application (1,044 words)
- [docs/golang/index.html](/content/docs/golang/index.html) (165 words)
- [Security - SuperTokens Docs](/content/docs/post-authentication/session-management/security/index.html): Learn how to protect your website from CSRF attacks using the `sameSite` cookie attribute. (1,015 words)
- [Blacklist access tokens - SuperTokens Docs](/content/docs/post-authentication/session-management/advanced-workflows/access-token-blacklisting/index.html): Enable immediate session revocation by implementing access token blacklisting with database checks. (1,159 words)
- [docs/guides/index.html](/content/docs/guides/index.html) (346 words)
- [Common actions - SuperTokens Docs](/content/docs/post-authentication/user-management/common-actions/index.html): Discover how to manage users using SuperTokens. (528 words)
- [Session Management - SuperTokens Docs](/content/docs/post-authentication/session-management/introduction/index.html): Understand access and refresh tokens, automatic session refresh, protected API verification, cookies, and session revocation. (504 words)
- [Customer Success Stories | SuperTokens](/content/customers/index.html): See how companies are leveraging SuperTokens to build secure and scalable authentication systems. (170 words)
- [supertokens-web-js](/content/docs/web-js/index.html): Documentation for supertokens-web-js (21 words)
- [SuperTokens - Modular User Management Suite](/content/product/index.html): Explore SuperTokens, the expansive and modular user management suite, providing a seamless solution for authentication and user management. (301 words)
- [SuperTokens, Open Source User Authentication](/content/auth/index.html): Open Source User Authentication. Build fast, maintain control, with reasonable pricing. (32 words)
- [discord/index.html](/content/discord/index.html) (57 words)
- [SuperTokens 💫 - Open Source Auth](/content/blog/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (9,309 words)
- [Account Linking](/content/features/account-linking/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (200 words)
- [Product Roadmap | SuperTokens](/content/product-roadmap/index.html): See SuperTokens' upcoming features, planned enhancements, and product priorities on our public product roadmap. (436 words)
- [Trustworthy SSO (Single-Sign On)](/content/features/single-sign-on/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (527 words)
- [Attack Protection Suite](/content/features/attack-protection-suite/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (299 words)
- [Multi-Tenant (B2B) Authentication](/content/features/multi-tenancy/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (309 words)
- [Pricing & Features for SuperTokens](/content/pricing/index.html): Pricing & Features for SuperTokens, for on premises & SaaS deployment (1,075 words)
- [Social Login](/content/features/social-login/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (169 words)
- [Passwordless Login](/content/features/passwordless-login/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (125 words)
- [Email Password Authentication](/content/features/email-password-authentication/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (127 words)
- [Passwordless Authentication with email Magic Links](/content/features/email-magic-links/index.html): Open Source Alternative to Auth0, Firebase Auth and AWS Cognito (382 words)
- [About Us - SuperTokens](/content/about-us/index.html): Learn more about SuperTokens, our mission, and our journey. (410 words)
- [Careers at SuperTokens](/content/careers/index.html): Be part of Powering the user infrastructure for the internet. (336 words)
- [Introduction - SuperTokens Docs](/content/docs/index.html): Add secure, customizable authentication and session management to your applications with SuperTokens. (346 words)

## About Pages

- [About - SuperTokens Docs](/content/docs/integrations/nextjs/app-directory/about/index.html): Integrate SuperTokens with Next.js for authentication, session verification, and route protection. (248 words)
- [About - SuperTokens Docs](/content/docs/migration/legacy/about/index.html): Open Source User Authentication (319 words)
- [About - SuperTokens Docs](/content/docs/integrations/nextjs/pages-directory/about/index.html): Integrate SuperTokens with Next.js for authentication, session verification, and route protection. (226 words)

## Resources

- [Full Page Index](/index.html): Browse all cached pages with rich metadata
- [About This Cache](/about.html): Methodology, technical details, and usage guidelines
- [XML Sitemap](/sitemap.xml): Machine-readable sitemap for crawler discovery
- [Robots.txt](/robots.txt): Crawler directives
- [Agentsite Network](https://agentsite.network/network.html): Public index of Agentsites and their machine-readable resources