Drop-in authentication for Egyptian & MENA products - passkeys, 2FA, Arabic-first UI, and billing in EGP. Secure by default, isolated per tenant, live in an afternoon.
Turn methods on from a dashboard toggle - the SDK renders the right UI, the server enforces the right rules. No rebuild.
Face ID, Touch ID, and hardware keys with conditional autofill - phishing-resistant sign-in your users never have to think about.
Enforce MFA per project. Backup codes & email fallback baked in.
Per-tenant signing keys, ES256, rotation-safe. Drop the JWKS URL into Convex and you're authenticated.
Every component ships Arabic copy and a right-to-left layout. One prop, or auto-detected.
Google, Apple, GitHub, Microsoft & Discord - first-use accounts created automatically.
Every project's data is sealed off from every other, enforced at the deepest layer, not hopeful app code.
Every sign-in, reset, and admin action logged. Versioned terms acceptance at sign-up.
One shared field, sensible fallbacks. Sent from your own domain, branded to your app.
Scaffold supported apps and migrate users from one command surface.
Drop in React components, hooks, and framework adapters.
Clerk and Auth0 quote you in dollars and settle abroad. AuthOwl invoices in EGP, adds 14% VAT correctly, and accepts cards and mobile wallets.
The @authowl/react components read your project config and render exactly what you enabled - nothing to wire.
// wrap once, render anywhere import { AuthOwlProvider, SignIn } from '@authowl/react' export default function Page() { return ( <AuthOwlProvider publishableKey={'pk_live_...'} apiUrl={'https://authowl.dev'} locale="auto"> <SignIn showBadge /> </AuthOwlProvider> ) }
TypeScript Core · React · Next.js · Convex
-> MobileReact Native · Expo · Flutter
-> BackendNode.js Admin · Go · Python · PHP · Rust
-> ToolingCLI
->Every plan includes password, social, magic-link, Arabic/RTL, managed authentication email, and tenant isolation. Starter adds production passkeys and opt-in MFA. Pro adds B2B and security-policy controls. Paid usage is protected by owner-approved spend limits, and Starter MAU overage can never cost more than moving to Pro for the same cadence. Free pauses new sign-ups or managed email before a hard cap can create cost; existing users always keep signing in.
| Feature | Free | Starter | Pro | Scale |
|---|---|---|---|---|
| Limits | ||||
| Monthly active users | 10,000 | 50,000 | 200,000 | Custom volume |
| Extra MAU (metered per Cairo month) | - | EGP 0.20 | EGP 0.10 | Contracted |
| Managed emails / Cairo month | 2,500 | 15,000 | 50,000 | Custom volume |
| Managed email overage (provider-accepted) | Hard cap | EGP 0.04 | EGP 0.03 | Contracted |
| Projects | 2 | 5 | Unlimited | Flexible |
| Team seats | 1 | 3 | 10 | Flexible |
| API rate limit (rpm) | 60 | 300 | 1,000 | Custom |
| Audit log retention | 7 days | 7 days | 30 days | Extended |
| Authentication | ||||
| Email · password | ✓ | ✓ | ✓ | ✓ |
| Magic link · email OTP | ✓ | ✓ | ✓ | ✓ |
| Authentication email delivery | Managed | Managed | Managed | Tailored |
| Passkeys · biometrics | - | ✓ | ✓ | ✓ |
| Social OAuth | ✓ | ✓ | ✓ | ✓ |
| Opt-in 2FA · TOTP + recovery | - | ✓ | ✓ | ✓ |
| Phone OTP (prepaid per segment) | - | ✓ | ✓ | ✓ |
| Organizations · RBAC | - | - | ✓ | ✓ |
| MFA enforcement | - | - | ✓ | ✓ |
| User bans | - | - | ✓ | ✓ |
| Custom session policy | - | - | ✓ | ✓ |
| OAuth applications (AuthOwl as IdP) | - | - | ✓ | ✓ |
| Enterprise SSO (SAML/OIDC) | - | - | Add-on | Add-on |
| Platform | ||||
| Arabic · RTL UI | ✓ | ✓ | ✓ | ✓ |
| Tenant isolation (RLS) | ✓ | ✓ | ✓ | ✓ |
| JWT issuer · Convex | ✓ | ✓ | ✓ | ✓ |
| JWT templates | 1 | 1 | Unlimited | Unlimited |
| Remove AuthOwl badge | - | ✓ | ✓ | ✓ |
| EGP billing · local wallets | ✓ | ✓ | ✓ | ✓ |
| Uptime SLA | - | - | - | 99.9% after HA launch |
| Support | Community | Priority | Dedicated | |
Ship secure, Arabic-ready, EGP-billed auth this afternoon - free up to 10,000 users.