Manage identities and users in the cloud

Headless and configurable authentication and user management, including MFA, social login, custom identities and more.

Secure and scalable identity management is complex. Ory Kratos streamlines it with a headless, cloud-native system, letting developers focus on building their applications.

Full control. Full flexibility. Fully yours.

Ory Kratos is a fully featured user management system built for the cloud. Control every aspect with a headless API.

Integrate anywhere

Ory Kratos comes with support for a wide range of 2FA protocols such as TOTP, FIDO2 & WebAuthn, works with any UI framework, and only a few lines of code are required to get it up and running.

Configure everything

Configurable login and registration flows, multi-factor authentication, custom identity models, bring your own UI.

Powered by Open Source

Ory Kratos is open source and evolves with every pull-request.

Łukasz Harasimowicz

Platform Team

Our system needs to handle sudden increases in traffic — authentication is always in the critical path for every request a user is making to our platform.

Case study

Ory Kratos features at a glance

Self Service Login and Registration

Users create and sign in to accounts using username/email and password combinations, Social Login, passwordless flows, TOTP and more.

Multifactor Authentication

Implement proven standards of web security with FIDO2, WebAuthn, TOTP. Use Yubikeys, Google Authenticator or FaceID to reduce friction and increase security.

User Management

Administer your userbase and get, create, update or delete identities and their data, with webhooks for even more control.

Bring Your Identity Model

Use customizable identity models (defining custom fields such as name, address, favorite pet) and create your own interfaces in your style and branding.

Social Logins

Simplify your users' experience and let them use their existing accounts at Google, GitHub, Apple, etc. to sign up and log in. All OIDC providers are supported.

Account Verification and Recovery

Verify an identity by checking the email, phone number, or physical address of that user. Provide recovery of accounts using "Forgot Password" flows, security codes, etc.

Integrations

Deploy Ory Kratos on your preferred infrastructure

Deploy on any infrastructure and take full control over authentication and user workflows of your application.

Documentation Quickstart Guide

page.tsx

import React, { useEffect, useState } from "react"
import { FrontendApi, Configuration, Session } from "@ory/client"

const basePath = "https://ory.example.com"

const ory = new FrontendApi(
  new Configuration({
    basePath,
    baseOptions: { withCredentials: true },
  }),
)

function Example() {
  const [session, setSession] = useState<Session | undefined>()

  useEffect(() => {
    ory
      .toSession()
      .then(({ data }) => {
        setSession(data)
      })
      .catch((err) => {
        console.error(err)
        // Not signed in, redirect to login
        window.location.replace(`${basePath}/self-service/login/browser`)
      })
  }, [])

  if (!session) {
    return <p>No session found.</p>
  }

  return <p>Welcome to, {session?.identity.traits.email}.</p>
}