Serve your free, freemium
and enterprise customers

MAUs are users who have performed an authentication action in the last 30 days.

Add new users in bulk by API or CSV upload.

Download a CSV file of users and their data from Userfront.

Allow authentication using a secret string of characters. Learn more

Allows users to access your application without the need for a password, using alternate verification methods.

Allow users to authenticate using their Google, Facebook, LinkedIn, Apple, Azure, or GitHub accounts.

Connect as many social SSO connections to your application as you want.

Allow users to authenticate using a time-based one time password (TOTP).

Common TOTP applications include Authy, Google Authenticator, Okta, and Microsoft Authenticator.

A secure link sent to a user's email address which, when clicked, grants them access to your application without needing a password.

A one-time code sent to a user's email to confirm their identity, often used as a second authentication factor.

Userfront can send emails on your behalf (default), or can provide you with webhooks to send fully customized email messages.

Support for Proof Key for Code Exchange (PKCE) to enable secure mobile app authentication.

Multi-factor authentication (MFA) is included as an option for all free & paid plans. MFA requires users to verify their identity using two methods, such as a password and a TOTP authenticator code.

Any authentication factor can be used as a first factor or a second factor.

Role-based access control (RBAC) allows you to define levels of access based on a user’s role(s).

On Userfront, users can have multiple roles in an organization and roles across multiple organizations, and organizations can have multiple users with roles.

Tenants allow you to store "account-level" data the same way for individual customers, organizations, and enterprises.

Start with tenants early to avoid having to re-architect your application down the road as you move from serving individual customers to organizations.

Global roles are application-wide roles that allow your team to have access at a level above your end users' access.

By default, Userfront includes a user's roles in their JWT access token. This allows you to verify their roles on your server without needing to contact Userfront with each request.

For applications that require realtime access control checks on each request, Userfront has endpoints to return a user's access on demand.

Refresh tokens allow your end users to securely re-authenticate in your application without requiring another login. This can give your application a better end user experience.

Manage your end users' sessions and maintain user authentication state between calls to your application.

Define custom duration times for the JWT access tokens issued to your end users. Shorter durations improve security, while longer durations can improve user experience.

Configure Userfront to make a callback request to your server each time a user is created, updated, or deleted.

Configure Userfront to make a callback request to your server each time a tenant (individual, organization, or enterprise org) is created, updated, or deleted.

Configure Userfront to make a callback request to your server when an email or SMS verification code is requested.

Configure Userfront to make a callback request to your server when an emailed login link is requested.

Create custom signup, login, and password reset forms to match your branding and authentication needs.

Add forms to your website or application without Userfront branding.

Configure Userfront to send a webhook so that you can send emails through your own infrastructure.

Configure Userfront to send a webhook so that you can send SMS text messages through your own infrastructure.

The number of unique users that register for your application.

The number of unique users that have signed into your application in the last 30 days.

The number of unique users that sign in to your application within a given day.

The number of new users that sign up for your application each day.

Userfront maintains a service level agreement (SLA) that provides uptime guarantees for the service. Learn more