Better Auth is the open-source authentication framework that runs entirely on your server. Infrastructure connects with a single plugin, giving you a complete admin dashboard, threat detection, enterprise SSO, audit logs, email and SMS templates, and more.
// dashboard
One interface to manage your entire auth system.
User Management
Create, update, suspend, and impersonate users from one place
Sessions
View active sessions, revoke access remotely, and manage devices
Organizations
Create workspaces, invite members, and assign role-based permissions
Account Linking
Connect social logins, manage credentials, and handle recovery flows
* included in all plans
// security
11 layers of protection. Block, challenge, or monitor. Zero security code to write.
IP Address Lookup
IP: 192.168.42.103
Resolved Users (1)
john_doe
j***@example.com
Block malicious actors before they breach your system.
Identifies malicious bots, preventing potential security threats
Detect repeated failed login attempts to prevent unauthorized access
Blocks passwords known to have been compromised in data breaches
Detect login attempts from different locations within an unreasonably short timeframe
Control traffic flow and prevent abuse at scale.
Rate limit sign-ups, sign-ins, and password resets to prevent abuse
Restrict access based on geographic location using country allow/deny lists
Identify suspicious IPs activity and either detect and allow or prevent the threat
Prevent users from creating multiple accounts to abuse free trials
Keep accounts secure and communications clean.
Automatically deactivates inactive user accounts to reduce security risks
Verify emails have valid MX records and block temporary/disposable email addresses
Rate limit emails sent to the same address to prevent spam and abuse
hetag69540@gxuzi.com
79.226.146.88
kv05@yopmail.com
125.16.89.198
fejypa@gmm.com
141.8.64.27
peter@pan.com
217.155.189.65
All security features included in every plan. No premium tiers.
// audit logs
Every event on your auth instance, logged, searchable, and exportable. Debug issues in seconds.
Every event captured
Sign-ins, password changes, session creates, org updates, and more
Per-user timeline
Debug any user's complete auth history
Session visibility
Devices, IPs, locations. Revoke with one click
Search & filter
By user, event type, date range, or IP address
Log Drains
// enterprise features
Let customers configure their own SSO. SCIM-based directory sync keeps users in sync. Fetch audit logs programmatically through our SDK.
Select identity provider
// email & sms
Every auth flow needs messaging. Verification emails, OTP codes via SMS, password resets, invites. All branded, all tracked, all protected from abuse.
SMS
Verify your email
to: user@example.com
Click the button below to verify your email address and activate your account.
This link expires in 10 minutes.
Logo, colors, button styles for email. Custom sender ID for SMS. Users see you, not us.
Resend, SendGrid, AWS SES for email. Twilio for SMS. Or use our managed delivery.
Per-user and per-IP limits. Automatic spam filtering. Keep your sender reputation clean.
127
sent today
99.2%
delivered
0
bounced
Install the package, add one plugin to your existing Better Auth config. That's the whole integration.
npm i @better-auth/infraimport { dash } from "@better-auth/infra"
export const auth = betterAuth({
plugins: [dash()]
})