Authgear: the open-source Keycloak alternative

The same Apache-2.0 licence and the freedom to self-host, with modern login built in and a team you can call. Run it yourself, or let us run it for you.

Schedule Demo

Why teams choose Authgear over Keycloak

Keep the freedom you chose Keycloak for
Authgear is open source under Apache-2.0, the same licence as Keycloak. Read the code, audit it, fork it and run it on your own servers. The self-hosted version has every feature of Authgear Cloud.
Less to run
Branded login pages, passkeys, magic links and SMS or WhatsApp OTP come built in. There are no theme JARs or third-party extensions to rebuild and re-test at every upgrade.
Someone to call
Talk directly to the team that builds Authgear. Get paid support for your own deployment with Enterprise, or have us run a private cloud for you.
Login pages that look like your product
Set your logo, colours, buttons and light or dark theme in the portal and preview changes live. Need more? Edit the CSS and HTML on any plan, self-hosted included, or build your own screens on the Auth Flow API. No FreeMarker templates.
Modern login, built in
Passkeys, biometric login in iOS and Android apps, magic links, SMS and WhatsApp OTP, and advanced password policies. Turn them on in the portal instead of adding extensions. If you self-host, connect your own email, SMS or WhatsApp provider.
Run it where you need it
Self-host with our Helm chart, use Authgear Cloud in the US or Hong Kong, or choose a private cloud we run for you in a UK or EU region.
Security on every plan
Multi-factor authentication, bot protection and account de-duplication are included, not add-ons. Authgear is ISO 27001 certified and SOC 2 Type II compliant.
Standard protocols, easy switch
OIDC and SAML single sign-on, just like Keycloak. Your apps talk to Authgear the same standard way, so moving over is mostly configuration.

Compare Authgear and Keycloak

Authgear
Keycloak
Open-source licence
Apache-2.0
Apache-2.0
Self-hosting
Yes, Helm chart for Kubernetes
Yes, containers and Kubernetes Operator
Managed cloud from the vendor
Authgear Cloud (US or Hong Kong), or a private cloud we run for you in a UK or EU region
No, third parties only
Login page customisation
Visual editor in the portal, custom CSS and HTML on every plan, or your own UI with the Auth Flow API
FreeMarker theme templates, deployed as a JAR
Passkeys (WebAuthn)
YesYes
Magic links
Yes
No
Via community extensions
SMS and WhatsApp OTP
Yes
No
Via community extensions
Biometric login in native apps
Yes, iOS and Android SDKs
No official mobile SDK (AppAuth recommended)
LDAP and Active Directory
YesYes
Vendor support
Direct from the Authgear team, with Enterprise support for self-hosted deployments
Community, or Red Hat subscription for the Red Hat build

Choosing Keycloak to keep control of your data?

So are we. Authgear is built by a UK company, and UK and EU customers can contract with it directly. You decide where your users' data lives: on your own servers, or in a private cloud we run for you in the UK or the EU.

Read about data sovereignty with Authgear

Moving off Keycloak?

We help teams move users, apps and login flows from Keycloak, Auth0, Firebase and in-house systems. You can import your Keycloak users with their passwords. Tell us about your setup and we'll plan the move with you.

Schedule Demo

Frequently asked questions

Is there a lighter alternative to Keycloak?

Authgear covers the same core standards, OIDC, SAML and MFA, with login UI, passkeys and OTP built in. You can self-host it or use our cloud, so there is less to build and maintain.

Is Authgear free and open source like Keycloak?

Yes. Authgear is open source under Apache-2.0, the same licence as Keycloak, and free to self-host. You pay only for your infrastructure, and for Enterprise support if you want it. Authgear Cloud also has a free plan.

Is there a managed version of Keycloak?

Not from the Keycloak project itself. Red Hat sells a supported build that you run yourself, and several third parties host Keycloak. With Authgear, the team that builds the product can run it for you, on Authgear Cloud or a private cloud.

Does Keycloak support passkeys?

Yes. Keycloak 26 supports passkeys and WebAuthn in its standard login forms. Authgear supports passkeys too, and adds magic links, SMS and WhatsApp OTP and biometric login in mobile apps without extensions.

Can I migrate from Keycloak to Authgear?

Yes. Both use OIDC and SAML, so your apps mostly need new client settings. You can import your Keycloak users with their passwords.

Where is my data stored with Authgear?

Your choice. Self-host anywhere, including the UK and the EU. Authgear Cloud runs in the US or Hong Kong, and an EU region is coming soon. A private cloud we run for you can be in a UK or EU region today.