zyphr — sessionhostapi.zyphr.devsession ~/auth/ready
dev@zyphr:~/zyphr$
Auth-as-a-Service

Authentication that communicates

//Drop-in auth with OAuth, magic links, and MFA — that automatically sends verification emails, password resets, and security alerts. No glue code.

Start for FreeRead the Docs
✓1,000 MAU free✓OAuth · magic links · MFA✓Auth-triggered messaging
dev@zyphr:~/zyphr$
// Capabilities

Everything you need to secure users

OAuth, passwordless, MFA, and session control — with account protection built in.

◎
OAuth Providers

Google, Apple, Facebook, and GitHub sign-in with automatic account linking.

✦
Magic Links

Passwordless authentication via secure email links. One click to sign in.

⚿
MFA / 2FA

TOTP-based multi-factor authentication with recovery codes and backup options.

⊟
Session Management

Configurable session limits, device tracking, and remote session revocation.

⛊
Brute Force Protection

Account lockout, rate limiting, and suspicious login detection built in.

✓
Email Verification

Automatic verification emails on signup with configurable flows and templates.

dev@zyphr:~/zyphr$
// Developer-first

Register users, send emails — one call

User registration automatically triggers verification emails. Password resets send reset links. MFA challenges deliver codes. All through one platform.

201user.created usr_9f2a
→verification email queued
200session issued 52ms
register-user.tsTypeScript
import Zyphr from '@zyphr-dev/node-sdk';
 
const zyphr = new Zyphr('zy_live_xxx');
 
// Register a new user
const { user, session } = await zyphr.auth.register({
  email: 'jane@example.com',
  password: 's3cur3P@ss',
  name: 'Jane Doe',
});
 
// Zyphr automatically:
// ✓ Creates the user record
// ✓ Sends verification email
// ✓ Returns a session token
// ✓ Fires user.created webhook
 
// Later: OAuth sign-in
const { user: oauthUser } = await zyphr.auth.oauth({
  provider: 'google',
  idToken: googleIdToken,
});
dev@zyphr:~/zyphr$
// FAQ

Frequently asked questions

Zyphr auth is designed to work seamlessly with transactional messaging. When a user registers, the verification email is sent automatically through your configured provider. Password resets, MFA codes, and security alerts all flow through the same platform — no glue code needed.

Yes. Zyphr supports bulk user import with bcrypt-hashed passwords. Users can continue using their existing credentials without needing to reset. We provide migration guides for Auth0, Firebase Auth, and Cognito.

Yes. Zyphr supports magic link authentication where users receive a secure link via email to sign in. The email is sent automatically through your configured email provider — no separate integration needed.

Zyphr supports Google, Apple, Facebook, and GitHub out of the box. Additional providers can be added via the dashboard. Automatic account linking connects OAuth identities to existing email accounts.

dev@zyphr:~/zyphr$ zyphr signup
200 OK — ready when you are

Auth that just works

1,000 monthly active users free. No credit card required.

Get Started Free