by SupabaseAuthentication and user management
Auth inside a Supabase Postgres project: 100,000 monthly active users on the $25 Pro plan, SSO priced per user, 17 regions.
100,000 monthly active users on the $25 Pro plan, SSO priced per user, and SOC 2, ISO 27001 and a HIPAA BAA on the self-serve Team plan.
Supabase Auth gives a Supabase project sign-in, MFA and SSO with users stored in the project’s own Postgres database. Pro covers 100,000 monthly active users for $25 and prices SAML SSO per user rather than per connection. For regulated work, Team customers get the SOC 2 Type 2 report and ISO 27001 certificate in the dashboard and can request a BAA there.
Against 3 other products we reviewed in Authentication and user management: what you pay for with each, the five access facts, the plan limits we recorded and each review's bottom line. The note under the table says how each one was checked.
| Metric | Supabase Auth | Firebase Authentication | Clerk | WorkOS |
|---|---|---|---|---|
| What you're paying for | Worth the price100,000 monthly active users on the $25 Pro plan, SSO priced per user, and SOC 2, ISO 27001 and a HIPAA BAA on the self-serve Team plan. | Worth the priceSign-in that plugs into Firebase and Google Cloud, free to 50,000 monthly users, with SAML at $0.015 per user and a self-serve Google Cloud BAA. | Saves engineering timeReady-made sign-in and user management, free for 50,000 retained users, with SSO and MFA from $25 a month at published prices. | Saves engineering timeEnterprise SSO and directory sync at a published $125 per connection, on top of user management that is free for up to 1 million monthly users. |
| Overall score | 9.3Best | 8.4 | 8.2 | 7.9 |
| Free option | Free plan | Free plan | Free plan | Free plan |
| Card to start | –Not measured | No card needed | No card needed | No card needed |
| Getting access | Self-serve | Self-serve | Self-serve | Self-serve |
| Starter priceCheapest paid plan | $25/mo | $0.0055/MAU above 50,000 | $25/mo | $125/SSO connection/mo |
| Pricing model | Usage-based | Usage-based | Usage-based | Usage-based |
| Pricing page | Public prices | Public prices | Public prices | Public prices |
| Free plan | 50,000 MAU; paused after 1 week inactive | 50,000 MAU; Spark capped at 3,000 a day | 50,000 MRU per app, no card | 1,000,000 MAU, no card until production |
| Entry paid plan at 10,000 users | $25/mo (Pro), 100,000 MAU included | $0 (Blaze), 50,000 MAU at no cost | $25/mo (Pro), $20 billed annually | $0 (users free up to 1M) |
| Enterprise SSO | 50 SSO users on Pro, then $0.015 each | 50 SAML/OIDC users free on Blaze, then $0.015 each | 1 connection on Pro, then $75/mo each | $125/mo per connection (1–15), down to $65 at 51–100 |
| SOC 2 report | Type 2, on Team ($599/mo) | SOC 2 (Google), via Compliance Reports Manager | Type 2, on Business ($300/mo) | Type II, from the Trust Center on request |
| HIPAA BAA | Team plan, paid add-on | Google Cloud BAA, accepted in the console | Enterprise plan | Enterprise plans |
| Data region | 17 AWS regions, EU included | US only | US only | US (per the DPA) |
| Log retention on the entry paid plan | 7 days of auth audit logs (Pro) | 30 days in Cloud Logging (activity logs, opt-in) | 7 days of application logs (Pro) | 90 days of events via the Events API |
| Bottom line | From its public pages, Supabase Auth is the least expensive per user of the three and the only one with a BAA on a self-serve plan. It fits best when the rest of your app runs on Supabase. | From its public pages, Firebase Authentication is the least expensive route here to SAML SSO and a self-serve BAA, inside the Firebase platform. Check US-only processing and the protections it does not list. | From its public pages, Clerk offers the largest free allowance here and clear prices from the first user to SSO. Check US-only hosting and the plan that unlocks the SOC 2 report against your customers’ requirements. | From its public pages, WorkOS offers the largest free user allowance here and clear per-connection prices for enterprise SSO. Budget $125 a month per SSO customer and check US-only hosting. |
Evidence: Supabase Auth: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Firebase Authentication: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Clerk: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; WorkOS: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run. Prices in USD as listed, excluding tax. "–" means not recorded.
Review from public pages
Written from Supabase Auth's public pages (pricing, security or privacy, and docs) as read on Oct 15, 2026. We did not sign up, and no hands-on run is published yet.
We read Supabase's pricing and security pages and its Auth, password security, CAPTCHA, passkey, rate limit and regions docs on Oct 15, 2026; we did not sign up for this review. Supabase Auth is not sold on its own: it is part of a Supabase project, and the docs say it stores users in the project's Postgres database, in a dedicated schema you can link to your own tables.
The pricing page lists auth limits line by line. Free includes 50,000 monthly active users and basic MFA, but free projects are paused after one week of inactivity and limited to two active. Pro adds 100,000 users, SAML SSO priced per SSO user, and leaked-password protection, which the docs confirm starts on Pro.
Two details need care. Passkey sign-in is documented but marked experimental, with an API that may change. And the Team plan card lists SSO for the Supabase Dashboard while the comparison table marks SSO as Contact Us on Team; ask before you count on it.
Pro includes 100,000 monthly active users for $25, then $0.00325 each.
vs Auth0: Clerk’s Pro includes 50,000 retained users; Auth0’s B2C Essentials is $700 at 10,000.
50 SSO users are included on Pro, then $0.015 each, with no per-connection fee on the pricing page.
vs Auth0: Clerk charges $75/mo per extra connection; Auth0 from $100.
Team customers can request a BAA on the dashboard; HIPAA is a paid add-on, and the SOC 2 and ISO 27001 documents are there too.
vs Auth0: Auth0 and Clerk offer the BAA on Enterprise.
Projects, including Auth, are hosted in the AWS region you choose, with several EU options.
Auth data sits in a schema of the project database and can be linked to your tables with triggers and foreign keys.
Free projects are paused after one week of inactivity, and only two can be active.
The SOC 2 report, ISO 27001 certificate and BAA are for Team ($599/mo) and Enterprise customers.
The docs mark passkey support experimental and say the API may change without notice.
Auth comes with a Supabase project; compute beyond the included Micro credit, custom domains and phone MFA are billed separately.
Supabase bills per organization plan plus usage. Pro is from $25 a month and includes 100,000 monthly active users (then $0.00325 each), 100,000 third-party MAU and 50 SSO users (then $0.015 each), plus $10 of compute credit that covers one Micro instance. Team is from $599 with the same auth allowances, 28-day auth audit logs and the compliance documents.
What raises the bill: compute above the credit, additional projects from $10 a month, custom domains at $10 per domain per month, phone MFA at $75 a month for the first project and $10 for each additional one, and the HIPAA add-on on Team, whose price is not on the pricing page. Pro has a spend cap on by default.
The Auth docs say user data is stored in the project’s own Postgres database, in a dedicated schema that you can connect to your tables; the pricing page lists user data ownership on every plan.
From its public pages, Supabase Auth is the least expensive per user of the three and the only one with a BAA on a self-serve plan. It fits best when the rest of your app runs on Supabase.
| Limit | As recorded |
|---|---|
| Free plan | 50,000 MAU; paused after 1 week inactive |
| Entry paid plan at 10,000 users | $25/mo (Pro), 100,000 MAU included |
| Enterprise SSO | 50 SSO users on Pro, then $0.015 each |
| SOC 2 report | Type 2, on Team ($599/mo) |
| HIPAA BAA | Team plan, paid add-on |
| Data region | 17 AWS regions, EU included |
| Log retention on the entry paid plan | 7 days of auth audit logs (Pro) |
Read from the vendor's public pages on Oct 15, 2026. No hands-on run is published yet. How we check
We have not published a sign-up run for Supabase Auth yet. The access facts above were read from its sign-up and pricing pages on Oct 15, 2026.
We have not published API calls for Supabase Auth yet.
Supabase Auth lists 4 plans. The cheapest paid plan, Pro, costs $25/mo.
Prices as listed, USD, excluding tax; observed 2026-10-15.
Source: supabase.com pricing page. Prices change; the observed date above is when our agent read them.
We read the pricing, security and docs pages of three authentication services on the same day and scored them on the same six indicators. What each one sells, what 10,000 users and five SSO connections cost, and who should pick which.
