Clerk

Fast and reliable OTP delivery with brute force prevention

Six-digit code authentication sent to user email

Passwordless magic link authentication via email

SAML, OIDC, and EASL-supported enterprise authentication

Passwordless authentication using email magic links with spam/fraud filtering

Authenticate users with passkeys across devices

Secure password authentication with breach detection and recovery options

Use same session across applications on different domains

Single-use token authentication generated by API

SMS-based authentication codes for users

Enable users to sign in with social providers

Social authentication with 20+ options including Google, GitHub, Facebook, and more

Drop-in component for user authentication and login

Drop-in component for user registration and account creation

Classic username-based authentication method

Authenticate with MetaMask and Coinbase Wallet

Allow users to discover and join organizations based on email domain

Automatically invite users based on verified email domain membership

Basic role-based access control with Admin and Member roles

Component allowing users to create new organizations

Fully customizable authorization with custom roles and permission sets

Simple team invitation system to fuel application growth

Component displaying list of organizations and memberships

Full suite of components for managing organizations and team structures

Component for managing organization settings and details

Component for users to switch between multiple organizations

Restrict organization members to specific email domains

Subscription billing with React components, no payment code or webhook management needed

Plan-based access control and feature gating based on subscription level

Define and manage subscription plans with pricing tiers

Component to display pricing plans with feature comparisons and subscription options

Native integration with Stripe for payment processing

Prebuilt components for pricing pages and customer self-service subscription management

Unified view of user and subscription information in one system

Protect users from automated brute forcing attacks

SOC 2 type 2 compliant with regular third-party audits and penetration tests

Allow and deny users based on domain, phone number, Web3 wallet address, etc.

Prevent sign-ups from known disposable email services

Prevent abuse by blocking email subaddresses with plus separator

Machine learning-powered bot detection to reduce fraudulent sign-ups

Completely custom token claims for external service integration

Set custom password requirements beyond NIST 800-63B defaults

Set maximum session duration from 5 minutes to 10 years

Add custom data into default authentication tokens

Allow users to view and log out devices actively accessing their account

Block high-risk disposable email domains and restrict email subaddresses

Self-serve MFA settings with authenticator apps, SMS codes, and backup codes

Automatically check passwords against leaked password databases

Restrict application access to invited users only

Full session lifecycle management including device monitoring and session revocation

Allow users to sign in to multiple accounts on one device

Prevent unwanted users from returning to application

Ensure only one account created when using multiple authentication methods

No-questions-asked data exports of all Clerk user data

Dropdown menu component providing account access and user options

Store custom data with user objects in Clerk

Component to manage user profile information and settings

Component for managing waitlists and signups