Hacker ApprovedDepartments

Auth0

Ranked 5 of 8 authentication services by recommenders

Developers recommend it for easy integration, clear developer experience and handing user security to a managed service. Most common caveat: difficult documentation and vendor lock-in with aggressive sales.

Developers recommend it for easy integration, clear developer experience and handing user security to a managed service. Most common caveat: difficult documentation and vendor lock-in with aggressive sales.

35 people gave an opinion

recommend it
16
criticize it
19
approval share
46%
Each figure is one person. RecommendsCriticizes

Recommended in 8 of 13 months

  1. November 2025: recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: recommended
  5. March 2026: not recommended
  6. April 2026: not recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: not recommended
  12. October 2026: not recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 16 people recommend itNeeds 10 or more, met.
  • 0.8 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 8 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Easy to integrate and use

    “that walled garden thing (auth0 or whatever is in fashion these days) is super simple to use”

    Comment from 7 May 2026 in “From Supabase to Clerk to Better Auth”

    “Auth0 really is super easy and comfortable to integrate”

    Comment from 20 Nov 2025 in “Okta's NextJS-0auth troubles”

    “Easy to use and high reliability.”

    Comment from 6 May 2026 in “From Supabase to Clerk to Better Auth”
  • Offloads user security to provider

    “it gave the responsibility of securing users to Auth0 and minimized our PII and attack surface”

    Comment from 6 May 2026 in “From Supabase to Clerk to Better Auth”

    “I would definitely go with something like firebase or auth0 vs rolling your own auth”

    Comment from 26 Feb 2026 in “Reverse engineering the KakaoTalk app so I can build a Beeper Bridge”

    “use a third party system like FusionAuth or Auth0”

    Comment from 7 Jul 2026 in “Better Auth is joining Vercel”
  • Clear concepts and developer experience

    “auth0 did a great job at unfolding such less trivial concepts into a language that made them accessible to a wider audience”

    Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

    “distinguished itself with a modern, streamlined architecture and a commendable focus on developer experience”

    Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”
  • Broad features including AI agent auth

    “Which would cover things like token exchange for third party APIs, human in the loop, and also authorization methods.”

    Comment from 5 Feb 2026 in “Ask HN: How do you authorize AI agent actions in production?”

    “Auth0 is constantly releasing new features, including a new major offering now for AI agents.”

    Comment from 8 Feb 2026 in “An Update on Heroku”

What people warn about

Each mark is one comment

  • Documentation is hard to read

    “their documentation is such a bloat, that I am already prototyping with better-auth”

    Comment from 6 Nov 2025 in “The trust collapse: Infinite AI content is awful”

    “I find their documentation bafflingly difficult to read”

    Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

    “Their documentation was absent and or terrible IIRC”

    Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”
  • Vendor lock-in and hard exports

    “they also required you be on a paid plan to even be able to get the export, which is kinda crazy”

    Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

    “you have to file a support ticket for them to do it, and it may take them a bit of time”

    Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

    “that is daylight robbery/extortion, a poster child for vendor-lock-in”

    Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”
  • Aggressive sales, business-focused

    “Auth0 is a vendor locked PoS with a very aggressive sales team.”

    Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

    “being a vast corrupt funnel of business to them”

    Comment from 13 Mar 2026 in “1B identity records exposed in ID verification data leak”
  • Often called a mess

    “I've never really liked it, but auth is not my area. Of course, our company uses it...”

    Comment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

    “Yea auth0 is an absolute clown show.”

    Comment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

    “the whole stack is rather clownish”

    Comment from 20 Nov 2025 in “Okta's NextJS-0auth troubles”

Other authentication services people recommend

The four most recommended other authentication services, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Auth0 compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
Better Auth46885%91 yr3 ownersApproved
Ory Hydra22292%7—Approved
Clerk191654%7——
AWS Cognito183435%6——
Auth0This page161946%8——
See all 8 authentication services, ranked

What people said

36 of the 41 comments that mention it, newest first. Each links to the original comment.

“Lots of really thorny gotcha's relating to their proprietary triggers that aren't documented anywhere.”

CriticizesComment from 29 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

“Auth0 will be annoying about it but even they will do it”

MixedComment from 29 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

“I've never really liked it, but auth is not my area. Of course, our company uses it...”

CriticizesComment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

“they also required you be on a paid plan to even be able to get the export, which is kinda crazy”

CriticizesComment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

“you have to file a support ticket for them to do it, and it may take them a bit of time”

CriticizesComment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

“Auth0 is a vendor locked PoS with a very aggressive sales team.”

CriticizesComment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

“that is daylight robbery/extortion, a poster child for vendor-lock-in”

CriticizesComment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

“Auth0 and Firebase both let you export user password hashes”

RecommendsComment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

“use a third party system like FusionAuth or Auth0”

RecommendsComment from 7 Jul 2026 in “Better Auth is joining Vercel”

“auth0 does get close to slop”

CriticizesComment from 12 Jun 2026 in “Slightly reducing the sloppiness of AI generated front end”

“To me the "AI slop" mostly just looks like the last decade of SaaS products.”

CriticizesComment from 12 Jun 2026 in “Slightly reducing the sloppiness of AI generated front end”

“Auth0 breaks password managers.”

CriticizesComment from 8 May 2026 in “From Supabase to Clerk to Better Auth”

“that walled garden thing (auth0 or whatever is in fashion these days) is super simple to use”

MixedComment from 7 May 2026 in “From Supabase to Clerk to Better Auth”

“it gave the responsibility of securing users to Auth0 and minimized our PII and attack surface”

RecommendsComment from 6 May 2026 in “From Supabase to Clerk to Better Auth”

“Easy to use and high reliability.”

RecommendsComment from 6 May 2026 in “From Supabase to Clerk to Better Auth”

“being a vast corrupt funnel of business to them”

CriticizesComment from 13 Mar 2026 in “1B identity records exposed in ID verification data leak”

“I would definitely go with something like firebase or auth0 vs rolling your own auth”

RecommendsComment from 26 Feb 2026 in “Reverse engineering the KakaoTalk app so I can build a Beeper Bridge”

“Auth0 is constantly releasing new features, including a new major offering now for AI agents.”

RecommendsComment from 8 Feb 2026 in “An Update on Heroku”

“Which would cover things like token exchange for third party APIs, human in the loop, and also authorization methods.”

RecommendsComment from 5 Feb 2026 in “Ask HN: How do you authorize AI agent actions in production?”

“you get 25,000 users in our free tier with a custom domain”

RecommendsComment from 6 Jan 2026 in “Ask HN: How Are You Handling Auth in 2026?”

“That significantly reduces (but doesn't eliminate) the need for moderation.”

RecommendsComment from 21 Dec 2025 in “Why do people leave comments on OpenBenches?”

“similar with their prev? use of auth0”

CriticizesComment from 27 Nov 2025 in “Mixpanel Security Breach”

“Auth0 does this correctly, though - email and user ID are separate identities.”

RecommendsComment from 23 Nov 2025 in “GitHub have added social logins”

“And auth0 was also delivering that, before acquisition.”

CriticizesComment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

“Things like Auth0 and Firebase Auth are built for nobody and make life more difficult.”

CriticizesComment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

“integration with a number of platforms including Okta/Auth0”

CriticizesComment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

“auth0 did a great job at unfolding such less trivial concepts into a language that made them accessible to a wider audience”

RecommendsComment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

“Their documentation was absent and or terrible IIRC”

CriticizesComment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

“Yea auth0 is an absolute clown show.”

CriticizesComment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

“distinguished itself with a modern, streamlined architecture and a commendable focus on developer experience”

RecommendsComment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

“The ability to run arbitrary code hooks at various points allowed us to do pretty interesting stuff in a managed way”

RecommendsComment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

“I find their documentation bafflingly difficult to read”

CriticizesComment from 21 Nov 2025 in “Okta's NextJS-0auth troubles”

“the whole stack is rather clownish”

CriticizesComment from 20 Nov 2025 in “Okta's NextJS-0auth troubles”

“Auth0 really is super easy and comfortable to integrate”

RecommendsComment from 20 Nov 2025 in “Okta's NextJS-0auth troubles”

“why have major authentication providers like @auth0 and @ClerkDev and @Google / @LinkedIn SSO have not supported”

CriticizesComment from 10 Nov 2025 in “Ask HN: Why no one supports multi-signer auth?”

“their documentation is such a bloat, that I am already prototyping with better-auth”

CriticizesComment from 6 Nov 2025 in “The trust collapse: Infinite AI content is awful”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.