Best Clerk Alternatives in 2026: Auth Priced per User
Nine auth providers with the monthly bill computed at three user counts from each vendor's own price list, so the switch is a number before it is a migration.
WorkOS AuthKit is the best Clerk alternative in 2026 for a product that will outgrow 50,000 users: user management is free through 1 million monthly active users, where Clerk Pro reaches $1,025/mo at 100,000 retained users on monthly billing. Better Auth is the pick when you want the users in your own database with no per-user meter at all, and Supabase Auth covers 100,000 users inside the Pro plan you may already pay for Postgres.
Stay on Clerk when the prebuilt components and the organizations model are the reason you chose it, because the free Hobby plan already covers 50,000 retained users per app. Every price here was read on the vendor's own pricing page on 26 October 2026.
Key facts9 tools compared: WorkOS, Better Auth, Supabase Auth, Amazon Cognito, Kinde, Auth0, Stytch…
- 9 tools compared: WorkOS, Better Auth, Supabase Auth, Amazon Cognito, Kinde, Auth0, Stytch, PropelAuth, Descope
- Better Auth (best for: TypeScript teams that want users in their own Postgres with no per-user meter): Framework free and open source; Infrastructure Pro $20/mo flat, SSO $50/mo per connection after the first
- Supabase Auth (best for: Apps already on Supabase Postgres that want auth inside the same bill): Free to 50,000 MAU; Pro includes 100,000 MAU, then $0.00325 each
- Amazon Cognito (best for: AWS-native teams that accept a thinner console in exchange for a per-user rate below Clerk's): Essentials and Lite free to 10,000 MAU; Essentials $0.015 per MAU above that, no base fee
A Clerk alternative is a hosted or self-managed authentication provider that gives a web app sign-up, sign-in, sessions and user management, priced on monthly active users rather than on seats. The reason teams shop around is the meter: Clerk bills every retained user past 50,000, and that line grows with the product. This page computes what nine providers charge at 10,000, 50,000 and 100,000 users, so the comparison is a bill rather than a feature list.
Toolradar data: of the 104 identity and access tools listed in the Toolradar identity and access ranking as of October 2026, 59% are free, freemium or open source. The median cheapest paid plan is $17.50/mo across the 22 tools that publish one. Auth providers for product teams compete there with workforce identity suites and password managers, which is why the cheap end of that list is not a Clerk replacement.
This page is about leaving Clerk at a known cost. The plan-by-plan detail of what you leave is in the Clerk pricing breakdown and the Clerk review, and the wider ranking of the category is the best authentication providers guide.
Top Picks
Based on features, real-world fit, and value for money.
Hosted AuthKit with organizations, MFA, passkeys and RBAC, free on users and priced on enterprise connections.
AuthKit free through 1M MAU, then $2,500/mo per extra million; SSO $125/mo per connection in the first band
Products that will pass 50,000 users and sell SSO to enterprise customers
Open-source TypeScript auth framework with plugins for organizations, passkeys and MFA, plus an optional hosted dashboard.
Framework free and open source; Infrastructure Pro $20/mo flat, SSO $50/mo per connection after the first
TypeScript teams that want users in their own Postgres with no per-user meter
Postgres-native auth with social OAuth, magic links, anonymous sign-ins and row level security on the same project.
Free to 50,000 MAU; Pro includes 100,000 MAU, then $0.00325 each
Apps already on Supabase Postgres that want auth inside the same bill
| Tool | Pricing | Best for |
|---|---|---|
| WorkOS | AuthKit free through 1M MAU, then $2,500/mo per extra million; SSO $125/mo per connection in the first band | Products that will pass 50,000 users and sell SSO to enterprise customers |
| Better Auth | Framework free and open source; Infrastructure Pro $20/mo flat, SSO $50/mo per connection after the first | TypeScript teams that want users in their own Postgres with no per-user meter |
| Supabase Auth | Free to 50,000 MAU; Pro includes 100,000 MAU, then $0.00325 each | Apps already on Supabase Postgres that want auth inside the same bill |
| Amazon Cognito | Essentials and Lite free to 10,000 MAU; Essentials $0.015 per MAU above that, no base fee | AWS-native teams that accept a thinner console in exchange for a per-user rate below Clerk's |
| Kinde | Free to 10,500 MAU; Pro base fee then $0.0175 per extra MAU; Plus $75/mo with unlimited enterprise SSO | B2B SaaS where most active users are paying subscribers |
| Auth0 | Free to 25,000 MAU; Essentials $35/mo and Professional $240/mo at 500 MAU; above 30,000 MAU is a quote | Teams that need Okta-grade compliance options and expect to negotiate a contract |
| Stytch | Pay as you go with no base fee; 10,000 MAU and five SSO or SCIM connections included, then $125 per connection | B2B products that need SCIM and organization policies before they need 50,000 users |
| PropelAuth | Free to 10,000 MAU; Growth $150/mo plus $0.05 per extra MAU with unlimited SAML; Growth Plus $500/mo | Early B2B products whose customers are companies, not consumers |
| Descope | Free Forever to 7,500 MAU; Pro $249/mo billed annually with 10,000 MAU, then $0.05 each; Growth $799/mo | Regulated B2B products that need SOC 2 reports, a 99.99% SLA and tenants from the first invoice |
Pricing read from each vendor's own pricing page, checked Oct 2026. 1 of 9 publishes prices for some plans and quotes the rest.
WorkOS
Hosted AuthKit with organizations, MFA, passkeys and RBAC, free on users and priced on enterprise connections.
- Pricing
- AuthKit free through 1M MAU, then $2,500/mo per extra million; SSO $125/mo per connection in the first band
Best for: Products that will pass 50,000 users and sell SSO to enterprise customers
Pros
- All three scenarios cost nothing on users, where Clerk reaches $1,025/mo at 100,000 on monthly billing
- The connection ladder drops to $100/mo at 16 connections, $80/mo at 31 and $65/mo past 50, and Directory Sync follows the same steps
- Admin Portal for customer IT teams is included, and the staging environment carries every product at no cost
Cons
- Ten enterprise customers on SSO cost $1,250/mo, almost double Clerk's $675/mo for the same ten connections
- Log streaming to a SIEM costs the same per connection as SSO, and the 99.99% SLA sits on the annual credits plan, not pay as you go
Better Auth
Open-source TypeScript auth framework with plugins for organizations, passkeys and MFA, plus an optional hosted dashboard.
- Pricing
- Framework free and open source; Infrastructure Pro $20/mo flat, SSO $50/mo per connection after the first
Best for: TypeScript teams that want users in their own Postgres with no per-user meter
Pros
- No user meter at any volume: 100,000 users cost the same flat Pro fee, or nothing on the framework alone
- Pro includes unlimited dashboard seats, 20,000 audit log events a month and one SSO plus one Directory Sync connection
- Transactional email is $0.001 each and SMS $0.09, printed on the page rather than passed through at market rate
Cons
- You host the database and own uptime, backups and the login screens, so the saving is paid in engineering hours
- Starter keeps audit logs for one day with one seat, and the custom dashboard domain and log drain are paid add-ons
Supabase Auth
Postgres-native auth with social OAuth, magic links, anonymous sign-ins and row level security on the same project.
- Pricing
- Free to 50,000 MAU; Pro includes 100,000 MAU, then $0.00325 each
Best for: Apps already on Supabase Postgres that want auth inside the same bill
Pros
- 100,000 users cost the Pro fee alone, and 200,000 cost $350/mo by our arithmetic, a fraction of Clerk's bill at 100,000
- Pro adds leaked password protection, 7-day auth audit logs and 50 SAML SSO users, then a per-user SSO rate
- User rows sit in your project's Postgres, so policies and joins against auth.users need no sync job
Cons
- Free projects pause after one week of inactivity and stop at two active projects, so a live app needs Pro from day one
- Phone MFA is a separate monthly add-on, and there is no organizations model, so B2B tenancy is tables you design
Amazon Cognito
AWS user pools with managed login, passkeys and SAML federation, billed per active user on three tiers.
- Pricing
- Essentials and Lite free to 10,000 MAU; Essentials $0.015 per MAU above that, no base fee
Best for: AWS-native teams that accept a thinner console in exchange for a per-user rate below Clerk's
Pros
- A lower per-user rate than Clerk's $0.02 in the 50,000 to 100,000 band: $600/mo at 50,000 and $1,350/mo at 100,000
- The 10,000-user free tier never expires with the 12-month AWS Free Tier, and it applies per account or organization
- Essentials includes passkeys, email and SMS passwordless and custom access tokens; Plus adds adaptive threat protection
Cons
- Users federated through SAML or OIDC get only 50 free MAU, then the same rate on every tier, so enterprise logins are metered too
- Plus has no free tier at all, and machine-to-machine tokens have no free allowance either
Kinde
Auth, organizations, feature flags and billing in one platform, with paid subscribers excluded from the user meter.
- Pricing
- Free to 10,500 MAU; Pro base fee then $0.0175 per extra MAU; Plus $75/mo with unlimited enterprise SSO
Best for: B2B SaaS where most active users are paying subscribers
Pros
- Users on a paid subscription are not counted, so a product with mostly paying customers can sit far below the $716.25/mo computed for 50,000 users
- Plus includes unlimited enterprise SSO connections and a 6% lower user rate, where Clerk bills each extra connection
- Pro includes 50 monthly active organizations, then $0.50 each, and single-user organizations are never billed
Cons
- For a consumer app the Pro rate of $0.0175 is close to Clerk's rate, so 100,000 users is still $1,591.25/mo by our arithmetic
- The free plan stops at 10,500 users, a fifth of Clerk's 50,000, so a growing free app pays sooner
Auth0
Okta's customer identity platform with the longest feature list, free to 25,000 users and quote-based beyond 30,000.
- Pricing
- Free to 25,000 MAU; Essentials $35/mo and Professional $240/mo at 500 MAU; above 30,000 MAU is a quote
Best for: Teams that need Okta-grade compliance options and expect to negotiate a contract
Pros
- The free plan now includes one enterprise connection, self-service SSO, SCIM, passwordless and five organizations
- A 22-day trial of paid features, and the startup plan gives 100,000 external active users free for a year
- Private cloud, a HIPAA BAA and adaptive MFA exist as enterprise add-ons
Cons
- Neither the 50,000 nor the 100,000 scenario has a printed price, so the comparison with Clerk's bill at 100,000 is a sales call
- Essentials starts at $35/mo for only 500 users on the slider, and keeping enterprise connections on a paid plan means the B2B plans
Stytch
B2B-first auth with built-in multi-tenancy, SCIM and fraud tooling, with no feature gating between plans.
- Pricing
- Pay as you go with no base fee; 10,000 MAU and five SSO or SCIM connections included, then $125 per connection
Best for: B2B products that need SCIM and organization policies before they need 50,000 users
Pros
- Five SSO or SCIM connections are included at no base fee, where Clerk includes one and WorkOS none
- Organizations are unlimited and every feature is on pay as you go, so there is no plan wall before the Enterprise contract
- Device fingerprinting starts at 10,000 free fingerprints, then $0.005 each, for teams that want fraud checks in the login
Cons
- The per-user rate past 10,000 is set by the on-page calculator rather than printed as a flat figure, so budget the 50,000 scenario from the page
- Removing Stytch branding and customizing emails is a $99 add-on, where Clerk Pro includes branding removal
PropelAuth
Organization-first auth with hosted org management UIs, unlimited SAML on Growth and SCIM on Growth Plus.
- Pricing
- Free to 10,000 MAU; Growth $150/mo plus $0.05 per extra MAU with unlimited SAML; Growth Plus $500/mo
Best for: Early B2B products whose customers are companies, not consumers
Pros
- Unlimited SAML connections on Growth, where ten connections cost Clerk $675/mo and WorkOS $1,250/mo
- Unlimited organizations, waitlist users and collaborators on every plan, including Free
- API keys with 1.5 million validations a month are included on Growth, then $0.0001 each
Cons
- $0.05 per user is two and a half times Clerk's rate, so 100,000 users is $4,650/mo by our arithmetic
- SCIM is $100 per connection on top of the $500/mo Growth Plus plan, and 2FA enforcement sits on that plan too
Descope
No-code auth flows with tenants, federated apps, SCIM and compliance add-ons, priced on users, tenants and connections.
- Pricing
- Free Forever to 7,500 MAU; Pro $249/mo billed annually with 10,000 MAU, then $0.05 each; Growth $799/mo
Best for: Regulated B2B products that need SOC 2 reports, a 99.99% SLA and tenants from the first invoice
Pros
- Pro ships SOC 2 reports, a 99.99% SLA and self-service SSO setup at $249/mo, where Clerk needs Business and Enterprise for those
- Growth adds SCIM, fine-grained authorization, multi-region residency and a HIPAA BAA, with 1 million anonymous users
- The Hello World startup plan gives early-stage companies the Pro tier free for a year
Cons
- The highest computed bill on this page: $4,749/mo at 100,000 users on Pro, or $4,549/mo on Growth
- The 10,000-user scenario is the only one here that is not free, and every paid plan is billed annually
What it is
Clerk counts monthly retained users (MRU): a user counts only after returning at least 24 hours after sign-up, so a sign-up that never comes back is never billed. The Hobby plan is free with 50,000 MRU per app, three dashboard seats and a fixed 7-day session, and it leaves out MFA, passkeys, branding removal and user bans. Pro is $25/mo on monthly billing or $20/mo billed annually, and it includes 50,000 MRU, then $0.02 each from 50,001 to 100,000, $0.018 from 100,001 to 1 million and $0.015 above that.
The B2B meters sit beside the user meter. Pro includes one SSO connection, then $75/mo each for connections 2 through 15 and $60/mo each from 16 to 100, and the Enhanced B2B add-on is $100/mo ($85 annually) with organizations at $1/mo each past 100. Business is $300/mo ($250 annually) for a SOC 2 report and 10 dashboard seats, and Enterprise is a custom annual contract with the HIPAA BAA and the 99.99% SLA.
How we compared: on 26 October 2026 we read the pricing pages of Clerk and the nine providers below. We then computed each provider's monthly bill for 10,000, 50,000 and 100,000 monthly active users on its cheapest plan that admits that volume. Only printed prices enter the arithmetic: users times a per-user rate, plus the base fee. Clerk counts retained users and the others count active users, so Clerk's bill for the same app is usually a little lower than a straight comparison suggests. Enterprise SSO and organizations are listed separately because they move a B2B bill. The ranking is by that computed cost, then by what the plan includes at the price.
Why it matters
Clerk is free until 50,000 retained users, and the bill is about a thousand dollars a month by 100,000. The arithmetic on monthly billing is $25 plus 50,000 extra users at $0.02, which is $1,025/mo, or $1,020/mo on the annual rate. At 10,000 and 50,000 users, Hobby costs nothing, and Pro only matters if you need MFA, passkeys or branding removal below that line.
The three cheapest exits do not meter users at these volumes. WorkOS AuthKit is free through 1 million MAU and charges $2,500/mo per additional million, so all three scenarios cost $0 before SSO. Better Auth is an open-source framework that stores users in your database, and its hosted Infrastructure plan is $20/mo flat with unlimited seats. Supabase Auth is included in the Pro plan with 100,000 MAU, then $0.00325 per user, so 200,000 users is $350/mo by our arithmetic. The Free plan covers 50,000 MAU. It pauses a project after one week of inactivity, though, which rules it out for anything live.
The per-user providers land in a band around Clerk. Amazon Cognito Essentials includes 10,000 MAU and bills $0.015 each above that: $600/mo at 50,000 and $1,350/mo at 100,000. Kinde Pro adds $0.0175 per user past 10,500 to its base fee: $716.25/mo at 50,000 and $1,591.25/mo at 100,000, with users on a paid subscription exempt from the meter. Auth0 is free to 25,000 MAU. Its self-serve slider ends at 30,000 MAU and the page sends you to sales, so the 50,000 and 100,000 scenarios have no printed price. Stytch includes 10,000 users and five SSO or SCIM connections at no base fee. The rate above that comes from the calculator on its pricing page rather than a printed per-user figure.
Two B2B specialists cost the most at scale because their per-user rate is two and a half times Clerk's. PropelAuth Growth is $150/mo with 10,000 users included, which is $2,150/mo at 50,000 and $4,650/mo at 100,000, with every SAML connection included. Descope Pro is $249/mo billed annually with 10,000 MAU, so 50,000 users is $2,249/mo and 100,000 is $4,749/mo; the $799/mo Growth plan with 25,000 included is cheaper at that top scenario, $4,549/mo. Both pay off only when tenants and SSO connections, not consumer users, are what you have thousands of.
Key features to look for
Pricing
Read the per-user rate and the free allowance before the base fee, because the base fee runs from nothing to $249/mo while the user line at 100,000 runs from nothing to about $4,500. The 10,000-user scenario is free on every provider except Descope, whose Free Forever plan stops at 7,500 MAU. A small app can treat the entry price as a tie and choose on features. At 50,000, Clerk is still free on Hobby while the per-user providers already bill several hundred dollars. At 100,000, WorkOS, Better Auth and Supabase separate from everyone else.
Two caveats change individual rows. Kinde does not count users who are on a paid subscription, so a SaaS with mostly paying customers pays far less than the computed figure. Descope and Auth0 price their paid plans on annual billing, and Clerk's annual rate is the one to compare with them. Enterprise SSO is the line to add for any B2B product. With ten customer connections, Clerk adds $675/mo, WorkOS $1,250/mo, Better Auth $450/mo and Descope Pro $250/mo (five included, then $50 each). Kinde Plus and PropelAuth Growth include them all.
Prices were read on 26 October 2026 on Clerk pricing, WorkOS pricing, Better Auth pricing, Supabase pricing, Amazon Cognito pricing, Kinde pricing, Auth0 pricing, Stytch pricing, PropelAuth pricing and Descope pricing. The scenario totals are our arithmetic on those printed rates. For the plan-level detail of the two biggest names, see the Auth0 pricing page and the Supabase pricing page.
| Plan | Price | Best for |
|---|---|---|
| Clerk Pro (reference) | $25/mo, or $20/mo billed annually | 50,000 retained users included, then $0.02 each to 100,000; 100,000 users is $1,025/mo on monthly billing |
| WorkOS AuthKit | $0/mo | User management free through 1 million MAU, then $2,500/mo per additional million; all three scenarios cost nothing |
| Better Auth Infrastructure Pro | $20/mo | Flat fee with unlimited seats and no user meter; the framework itself is free and stores users in your database |
| Supabase Pro | $25/mo | 100,000 MAU included, then $0.00325 each; 10,000 and 50,000 users fit the Free plan, 100,000 users is the Pro fee |
| Amazon Cognito Essentials | $0/mo base | 10,000 MAU free, then $0.015 each; $600/mo at 50,000 users and $1,350/mo at 100,000 |
| Kinde Pro | $25/mo base | 10,500 MAU included, then $0.0175 each, paid subscribers exempt; $716.25/mo at 50,000 and $1,591.25/mo at 100,000 |
| Auth0 Essentials | $35/mo at 500 MAU | Free plan covers 25,000 MAU; the self-serve slider ends at 30,000, so 50,000 and 100,000 users are a sales quote |
| Stytch pay as you go | $0/mo base | 10,000 MAU and five SSO or SCIM connections included; above that the pricing page's calculator sets the estimate |
| PropelAuth Growth | $150/mo | 10,000 MAU included, then $0.05 each with unlimited SAML; $2,150/mo at 50,000 and $4,650/mo at 100,000 |
| Descope Pro | $249/mo billed annually | 10,000 MAU included, then the same per-user rate as PropelAuth; $2,249/mo at 50,000 and $4,749/mo at 100,000 ($4,549/mo on Growth) |
The bottom line
Move to WorkOS AuthKit when the product is heading past 50,000 users and sells to companies, because the user line stays at zero through a million and the SSO ladder is printed. Move to Better Auth when the team writes TypeScript and wants the users in its own Postgres, and to Supabase Auth when the database already lives there and 100,000 users should cost the Pro fee alone.
Keep Clerk when its components and organizations are doing real work in your app, because Hobby is free to 50,000 retained users and Pro's per-user rate sits below PropelAuth, Descope and Kinde's consumer rate. Cognito undercuts it on the per-user rate for an AWS team willing to build more of the screens, and Auth0 is the name to take into a negotiation rather than a self-serve switch. The Clerk vs Auth0 comparison covers that head to head, and the authentication pricing comparison runs the four largest providers up to 1 million users.
Cite this: Devshot, "Best Clerk Alternatives in 2026: Auth Priced per User", November 2026.
Frequently asked questions
What is the best Clerk alternative in 2026?
What is the cheapest Clerk alternative at 100,000 users?
Is there a free Clerk alternative?
Clerk vs WorkOS: which is cheaper?
Which Clerk alternative includes enterprise SSO?
How hard is it to migrate users off Clerk?
Some offers on this page may be paid placements or contain affiliate links.
Get the Devshot brief
Free daily newsletter, read in 5 minutes.
Subscribe free