Auth0
Ranked 5 of 8 authentication services by recommenders
Developers recommend it for easy integration, clear developer experience and handing user security to a managed service. Most common caveat: difficult documentation and vendor lock-in with aggressive sales.
Developers recommend it for easy integration, clear developer experience and handing user security to a managed service. Most common caveat: difficult documentation and vendor lock-in with aggressive sales.
35 people gave an opinion
- recommend it
- 16
- criticize it
- 19
- approval share
- 46%
Recommended in 8 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: not recommended
- April 2026: not recommended
- May 2026: recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: not recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 16 people recommend itNeeds 10 or more, met.
- 0.8 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 8 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Easy to integrate and use
“that walled garden thing (auth0 or whatever is in fashion these days) is super simple to use”
Comment from 7 May 2026 in “From Supabase to Clerk to Better Auth” “Auth0 really is super easy and comfortable to integrate”
Comment from 20 Nov 2025 in “Okta's NextJS-0auth troubles” “Easy to use and high reliability.”
Comment from 6 May 2026 in “From Supabase to Clerk to Better Auth” Offloads user security to provider
“it gave the responsibility of securing users to Auth0 and minimized our PII and attack surface”
Comment from 6 May 2026 in “From Supabase to Clerk to Better Auth” “I would definitely go with something like firebase or auth0 vs rolling your own auth”
Comment from 26 Feb 2026 in “Reverse engineering the KakaoTalk app so I can build a Beeper Bridge” “use a third party system like FusionAuth or Auth0”
Comment from 7 Jul 2026 in “Better Auth is joining Vercel” Clear concepts and developer experience
“auth0 did a great job at unfolding such less trivial concepts into a language that made them accessible to a wider audience”
Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles” “distinguished itself with a modern, streamlined architecture and a commendable focus on developer experience”
Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles” Broad features including AI agent auth
“Which would cover things like token exchange for third party APIs, human in the loop, and also authorization methods.”
Comment from 5 Feb 2026 in “Ask HN: How do you authorize AI agent actions in production?” “Auth0 is constantly releasing new features, including a new major offering now for AI agents.”
Comment from 8 Feb 2026 in “An Update on Heroku”
What people warn about
Each mark is one comment
Documentation is hard to read
“their documentation is such a bloat, that I am already prototyping with better-auth”
Comment from 6 Nov 2025 in “The trust collapse: Infinite AI content is awful” “I find their documentation bafflingly difficult to read”
Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles” “Their documentation was absent and or terrible IIRC”
Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles” Vendor lock-in and hard exports
“they also required you be on a paid plan to even be able to get the export, which is kinda crazy”
Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again” “you have to file a support ticket for them to do it, and it may take them a bit of time”
Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again” “that is daylight robbery/extortion, a poster child for vendor-lock-in”
Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again” Aggressive sales, business-focused
“Auth0 is a vendor locked PoS with a very aggressive sales team.”
Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again” “being a vast corrupt funnel of business to them”
Comment from 13 Mar 2026 in “1B identity records exposed in ID verification data leak” Often called a mess
“I've never really liked it, but auth is not my area. Of course, our company uses it...”
Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again” “Yea auth0 is an absolute clown show.”
Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles” “the whole stack is rather clownish”
Comment from 20 Nov 2025 in “Okta's NextJS-0auth troubles”
Other authentication services people recommend
The four most recommended other authentication services, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Better Auth | 46 | 8 | 85% | 9 | 1 yr3 owners | Approved |
| Ory Hydra | 22 | 2 | 92% | 7 | — | Approved |
| Clerk | 19 | 16 | 54% | 7 | — | — |
| AWS Cognito | 18 | 34 | 35% | 6 | — | — |
| Auth0This page | 16 | 19 | 46% | 8 | — | — |
What people said
36 of the 41 comments that mention it, newest first. Each links to the original comment.
“Lots of really thorny gotcha's relating to their proprietary triggers that aren't documented anywhere.”
“Auth0 will be annoying about it but even they will do it”
“I've never really liked it, but auth is not my area. Of course, our company uses it...”
“they also required you be on a paid plan to even be able to get the export, which is kinda crazy”
“you have to file a support ticket for them to do it, and it may take them a bit of time”
“Auth0 is a vendor locked PoS with a very aggressive sales team.”
“that is daylight robbery/extortion, a poster child for vendor-lock-in”
“Auth0 and Firebase both let you export user password hashes”
“use a third party system like FusionAuth or Auth0”
“auth0 does get close to slop”
“To me the "AI slop" mostly just looks like the last decade of SaaS products.”
“Auth0 breaks password managers.”
“that walled garden thing (auth0 or whatever is in fashion these days) is super simple to use”
“it gave the responsibility of securing users to Auth0 and minimized our PII and attack surface”
“Easy to use and high reliability.”
“being a vast corrupt funnel of business to them”
“I would definitely go with something like firebase or auth0 vs rolling your own auth”
“Auth0 is constantly releasing new features, including a new major offering now for AI agents.”
“Which would cover things like token exchange for third party APIs, human in the loop, and also authorization methods.”
“you get 25,000 users in our free tier with a custom domain”
“That significantly reduces (but doesn't eliminate) the need for moderation.”
“similar with their prev? use of auth0”
“Auth0 does this correctly, though - email and user ID are separate identities.”
“And auth0 was also delivering that, before acquisition.”
“Things like Auth0 and Firebase Auth are built for nobody and make life more difficult.”
“integration with a number of platforms including Okta/Auth0”
“auth0 did a great job at unfolding such less trivial concepts into a language that made them accessible to a wider audience”
“Their documentation was absent and or terrible IIRC”
“Yea auth0 is an absolute clown show.”
“distinguished itself with a modern, streamlined architecture and a commendable focus on developer experience”
“The ability to run arbitrary code hooks at various points allowed us to do pretty interesting stuff in a managed way”
“I find their documentation bafflingly difficult to read”
“the whole stack is rather clownish”
“Auth0 really is super easy and comfortable to integrate”
“why have major authentication providers like @auth0 and @ClerkDev and @Google / @LinkedIn SSO have not supported”
“their documentation is such a bloat, that I am already prototyping with better-auth”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.