Sessions and security
Passwords, email codes, Google, TOTP, verification, recovery, and session controls.
Self-hosted Better Auth for TypeScript
Self-hosted authentication, already assembled.
Run a complete Better Auth server on your own infrastructure. PostgreSQL-backed sessions, organizations, OAuth, branded auth pages, and typed components are packaged into one deployable service.
auth.your-product.com/sign-in
OAuth
OAuth 2.1 + OIDC
Standards-based discovery
One container
Your infrastructure and PostgreSQL
React components
Styled with your tokens
Three ways in
Choose your authentication boundary.
Start with a same-origin proxy, connect any standards-compatible client through OAuth, or give every product its own branded auth domain.
01
Proxy
RecommendedKeep first-party cookies on your app origin while Krakstack Auth owns credentials and sessions.
02
OAuth / OIDC
Use authorization code flow, PKCE, discovery metadata, and the OAuth library you already trust.
03
Auth subdomain
Launch a dedicated, branded sign-in hostname linked to a project or organization.
Built around Better Auth
The hard auth work is connected and ready to run.
Organizations
Shared users, memberships, roles, invitations, and active organization state.
Project branding
Logos, shadcn CSS themes, sign-in methods, and custom hostnames per project.
Typed service access
Effect HttpApi clients and service keys for trusted backend integrations.
Own your auth without assembling it yourself.
Review the deployment requirements, build for your own origin, connect PostgreSQL, and integrate your first application. Krakstack Auth is self-hosted software; no managed cloud service is currently offered.