Email and password authentication for Next.js

Add sign-up, sign-in, email verification, password reset and optional two-factor authentication to a Next.js app with a handful of components. Your secret key stays on your server, and the session cookie is first-party on your own domain.

What you get

Sign-up and sign-in with email and password
Email verification and password reset
Sessions in a first-party, httpOnly cookie on your own domain
Optional two-factor authentication, with recovery codes
Rate limiting on every credential route

Get started

Install @authflowkit/sdk and @authflowkit/ui, create an app to get your secret key, then follow the quickstart: two environment variables, one route file, one provider, and the pages for sign-in, sign-up, verification and reset.