Hacker ApprovedDepartments

Ory Kratos

Shares rank 5 of 12 identity providers by recommenders

Open-source identity server covering login, registration, recovery and MFA, with a password migration hook. Critics often find configuration and documentation hard.

Open-source identity server covering login, registration, recovery and MFA, with a password migration hook. Critics often find configuration and documentation hard.

17 people gave an opinion

recommend it
8
criticize it
9
approval share
47%
Each figure is one person. RecommendsCriticizes

Recommended in 4 of 13 months

  1. November 2025: recommended
  2. December 2025: not recommended
  3. January 2026: not recommended
  4. February 2026: not recommended
  5. March 2026: not recommended
  6. April 2026: not recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: not recommended
  10. August 2026: recommended
  11. September 2026: not recommended
  12. October 2026: not recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 8 people recommend itNeeds 10 or more, not met.
  • 0.8 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 4 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Works well and does the job

    “It worked pretty well but in hindsight I would have hosted it as a separate application because it was a pain to bring along all of its dependencies.”

    Comment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

    “It works and does the job.”

    Comment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”
  • Easy frontend integration and dynamic forms

    “you can easily integrate them on the frontend when using Kratos”

    Comment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

    “Their dynamic forms stuff is really cool too”

    Comment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

What people warn about

Each mark is one comment

  • Hard to deploy with many dependencies

    “It worked pretty well but in hindsight I would have hosted it as a separate application because it was a pain to bring along all of its dependencies.”

    Comment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

    “We did eventually get it to work but had to change the sample docker deployment a fair bit.”

    Comment from 2 Jul 2026 in “Podman v6.0.0”

    “their hard dependency on Docker is a showstopper for me”

    Comment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”
  • Configuration and documentation are poor

    “I had a very hard time implementing browser flows, configuration is a mess”

    Comment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

    “Exactly our experience (poor documentation).”

    Comment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

Other identity providers people recommend

The four most recommended other identity providers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Ory Kratos compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
Keycloak442069%12—Approved
Authentik140100%11—Approved
FreeIPA14767%4—Approved
Okta114719%7——
Ory KratosThis page8947%4——
See all 12 identity providers, ranked

What people said

22 of the 23 comments that mention it, newest first. Each links to the original comment.

“Ory Kratos has a password migration hook that lets you migrate password credentials out of anything (including Cognito) without password resets.”

RecommendsComment from 28 Aug 2026 in “I used AWS cognito for a startup. I wouldn't do it again”

“We did eventually get it to work but had to change the sample docker deployment a fair bit.”

CriticizesComment from 2 Jul 2026 in “Podman v6.0.0”

“appreciate all your work Hydra, Kratos”

RecommendsComment from 25 Jun 2026 in “Cloudflare launched self-managed OAuth for all”

“Ory's Kratos handles identity, login, registration, recovery, MFA”

RecommendsComment from 25 Jun 2026 in “Cloudflare launched self-managed OAuth for all”

“Would I really want to tell someone to try starting something for our security that is an immediate attack vector?”

CriticizesComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“Exactly our experience (poor documentation).”

CriticizesComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“I had a very hard time implementing browser flows, configuration is a mess”

CriticizesComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“Really easy to maintain with simple configuration and fully featured API.”

RecommendsComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“Additional enterprise features that are not available in the open source version”

CriticizesComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“you can easily integrate them on the frontend when using Kratos”

MixedComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“their hard dependency on Docker is a showstopper for me”

CriticizesComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“check out the new version, i'm sure it has improved quite a bit since then”

RecommendsComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“possibly a deal breaker if somebody is looking for a versatile option”

CriticizesComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“this works well for simple RBAC usecases”

RecommendsComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“It works and does the job.”

MixedComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“Yeah that’s very disappointing and basically kills my interest in the product.”

CriticizesComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“I would say in the majority of cases you would be fine with just Ory Kratos.”

RecommendsComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“mostly because of the horrible patches to make it do things it was never meant to do”

CriticizesComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“This looks like great stuff.”

RecommendsComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“I knew it couldn't compete.”

CriticizesComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“Their dynamic forms stuff is really cool too”

MixedComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

“It worked pretty well but in hindsight I would have hosted it as a separate application because it was a pain to bring along all of its dependencies.”

MixedComment from 13 Nov 2025 in “Kratos - Cloud native Auth0 open-source alternative (self-hosted)”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.