[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"tools-page-auth-pricing-calculator":3},{"page":4,"related":148,"variants":167},{"path":5,"name":6,"title":7,"description":8,"checkedAt":9,"sources":10,"faq":38,"related":57,"nuxter":61,"body":64,"tool":146,"preset":147},"\u002Ftools\u002Fauth-pricing-calculator","Auth pricing calculator","Auth0 Pricing Calculator: Compare Clerk and Firebase","An Auth0 pricing calculator that also prices Clerk, Firebase, Supabase, WorkOS, Cognito and Stytch at your monthly active users, with MFA and SSO.","2026-10-06",[11,14,17,20,23,26,29,32,35],{"label":12,"url":13},"Clerk, Pricing","https:\u002F\u002Fclerk.com\u002Fpricing",{"label":15,"url":16},"Auth0, Pricing","https:\u002F\u002Fauth0.com\u002Fpricing",{"label":18,"url":19},"Google Cloud, Identity Platform pricing","https:\u002F\u002Fcloud.google.com\u002Fidentity-platform\u002Fpricing",{"label":21,"url":22},"Firebase, Pricing plans","https:\u002F\u002Ffirebase.google.com\u002Fpricing",{"label":24,"url":25},"Firebase docs, Authentication limits","https:\u002F\u002Ffirebase.google.com\u002Fdocs\u002Fauth\u002Flimits",{"label":27,"url":28},"Supabase, Pricing","https:\u002F\u002Fsupabase.com\u002Fpricing",{"label":30,"url":31},"WorkOS, Pricing","https:\u002F\u002Fworkos.com\u002Fpricing",{"label":33,"url":34},"AWS, Amazon Cognito pricing","https:\u002F\u002Faws.amazon.com\u002Fcognito\u002Fpricing\u002F",{"label":36,"url":37},"Stytch, Pricing","https:\u002F\u002Fstytch.com\u002Fpricing",[39,42,45,48,51,54],{"question":40,"answer":41},"How much does Clerk cost for 100,000 users?","Clerk's Pro plan has a monthly fee that includes a block of retained users, and each user above it is charged on a falling scale. At 100,000 retained users you pay the fee plus the first band of overage, and the calculator shows the sum. Sign-ups who never come back are not retained, so they cost nothing.",{"question":43,"answer":44},"What is the difference between MAU and MRU?","A monthly active user is anyone who signs in during the month. A monthly retained user, Clerk's unit, is a user who comes back at least a day after signing up, so a one-time sign-up is free. The same traffic is usually fewer MRU than MAU, and the gap grows with the share of sign-ups who never return.",{"question":46,"answer":47},"Is Auth0 free?","Auth0's Free plan covers a set number of monthly active users, with passwordless and social sign-in and an enterprise connection. It leaves out MFA with authenticator apps, so requiring MFA moves you to Essentials, which Auth0 prices in fixed steps by user count. Above its last published step, Auth0 asks you to talk to sales.",{"question":49,"answer":50},"Does WorkOS charge per user?","Not at first. Its free allowance of monthly active users is the largest of the providers here, and past it WorkOS charges a flat monthly price for each further block of users. Its own estimate counts a started block in full. Enterprise SSO and directory sync are billed per connection instead.",{"question":52,"answer":53},"How much does Supabase Auth cost?","Supabase Auth comes with every Supabase project. The Free plan includes monthly active users but pauses idle projects; Pro includes more for its monthly fee and then charges per user. That fee pays for the whole project, database included, so it is not an auth-only price.",{"question":55,"answer":56},"What does it cost to run your own auth?","There is no per-user fee. You pay for the compute, database and email that sign-in uses, and for the work of keeping it right, from password storage and sessions to account recovery and security fixes. On Cloudflare Workers the user and session tables sit in the database you already pay for, and a sign-in is a handful of requests and queries, so the Workers pricing calculator gives a fair estimate.",[58,59,60],"secret-key-generator","cloudflare-workers-pricing-calculator","nuxt-environment-variables",{"body":62,"to":63},"Nuxter's sign-in runs in your own Worker against your own Postgres database, with email links, passwords, passkeys, TOTP and GitHub, Google or Microsoft accounts. There is no per-user fee at any size.","\u002Ffeatures",{"type":65,"value":66,"toc":138},"minimark",[67,72,76,79,83,86,103,106,110,113,119,125,131,135],[68,69,71],"h2",{"id":70},"how-each-provider-counts-users","How each provider counts users",[73,74,75],"p",{},"Most providers bill monthly active users, but they draw the line in different places. Auth0 counts any external user who authenticated during the month on a tenant. Identity Platform counts any account that signed in during the month and stores inactive accounts for free. WorkOS counts a user who did anything in the calendar month, a profile update included. Cognito counts a user once they are active in the month on a given pricing tier.",[73,77,78],{},"Clerk is the exception. It bills monthly retained users: people who come back at least a day after they signed up. A launch that brings in thousands of curious sign-ups who never return costs nothing on Clerk, and the same month is billed in full elsewhere. The calculator treats your active users as retained, so it overstates Clerk for an app with a long tail of one-visit accounts.",[68,80,82],{"id":81},"what-forces-an-upgrade","What forces an upgrade",[73,84,85],{},"The user count is rarely the only driver. Two features move most apps onto a paid plan:",[87,88,89,97],"ul",{},[90,91,92,96],"li",{},[93,94,95],"strong",{},"MFA."," Clerk includes it only on Pro, and Auth0 adds authenticator-app MFA on Essentials. Firebase needs the upgrade to Identity Platform. Supabase, WorkOS, Cognito Lite and Stytch include authenticator-app MFA. Cognito bills SMS codes through Amazon SNS, Stytch passes them through at cost, and Supabase sells phone MFA as an add-on.",[90,98,99,102],{},[93,100,101],{},"Enterprise SSO."," Clerk and WorkOS price each SAML or OIDC connection, and Stytch includes a few before it does. Auth0's Free plan allows an enterprise connection, but its paid B2C plans leave them out, so SSO on a paid plan means its B2B plans. Supabase, Firebase and Cognito bill each user who signs in through SAML or OIDC, which depends on your customers' headcount, not on how many connections you have.",[73,104,105],{},"Smaller limits push teams up too: removing the provider's branding, separate production and development environments, log retention and custom domains. Read the plan pages for those before you commit.",[68,107,109],{"id":108},"graduated-stepped-and-blocked-prices","Graduated, stepped and blocked prices",[73,111,112],{},"Providers turn a user count into a price in three ways, and the shape matters as much as the rate.",[73,114,115,118],{},[93,116,117],{},"Graduated"," prices, used by Clerk, Identity Platform, Cognito Lite and Supabase's overage, charge each band's rate only for the users inside that band. Growing by one user adds one user's cost, and the average cost per user falls as you grow.",[73,120,121,124],{},[93,122,123],{},"Stepped"," prices, used by Auth0's self-serve plans, charge the price of the smallest step that covers your count. One user over a step boundary moves the whole bill to the next step, so a count just above a boundary is the most expensive place to be.",[73,126,127,130],{},[93,128,129],{},"Blocks",", used by WorkOS past its free allowance, charge for each started block. The first user of a new block costs as much as the whole block.",[68,132,134],{"id":133},"what-the-totals-leave-out","What the totals leave out",[73,136,137],{},"Each total covers one production environment. It leaves out SMS for phone sign-in and MFA, which several providers charge per message, and the per-user tiers for SAML and OIDC sign-ins where a provider bills them that way. Add-ons such as custom domains, phone MFA, bot protection and audit log streaming are extra where a provider sells them. Enterprise plans and annual commitments are negotiated, so a large account may pay less than the published rate.",{"title":139,"searchDepth":140,"depth":140,"links":141},"",2,[142,143,144,145],{"id":70,"depth":140,"text":71},{"id":81,"depth":140,"text":82},{"id":108,"depth":140,"text":109},{"id":133,"depth":140,"text":134},"auth-pricing-calculator",null,[149,155,161],{"path":150,"tool":58,"name":151,"title":152,"description":153,"summary":154,"checkedAt":9},"\u002Ftools\u002Fsecret-key-generator","Secret key generator","Secret Key Generator for .env, JWT and Webhooks","Generate random secret keys in your browser for NUXT_SESSION_PASSWORD, Better Auth, JWT and webhook signing, as hex, base64, base64url or letters and digits.","Secrets for NUXT_SESSION_PASSWORD, Better Auth, JWT and webhooks, as hex, base64 or base64url, with the .env and Wrangler lines.",{"path":156,"tool":59,"name":157,"title":158,"description":159,"summary":160,"checkedAt":9},"\u002Ftools\u002Fcloudflare-workers-pricing-calculator","Cloudflare Workers pricing calculator","Cloudflare Workers Pricing Calculator for a SaaS","Cloudflare Workers pricing calculator for a SaaS. Turn monthly users into a bill for Workers, D1, KV, R2, Queues and AI, and find the first Free limit you hit.","Turn monthly users into a Workers, D1, KV, R2, Queues and AI bill, and find the first Free plan limit you hit.",{"path":162,"tool":60,"name":163,"title":164,"description":165,"summary":166,"checkedAt":9},"\u002Ftools\u002Fnuxt-environment-variables","Nuxt environment variables","Nuxt Environment Variables: runtimeConfig to NUXT_","Paste a nuxt.config to get the Nuxt environment variables that override each runtimeConfig key, the type each value arrives as and the names that collide.","Paste a nuxt.config and get the NUXT_ variable for every runtimeConfig key, the type it arrives as and the names that collide.",[]]