FortressAuth

Secure-by-Default Authentication

A production-ready authentication library built with TypeScript and hexagonal architecture. Database-agnostic, email provider-agnostic, and secure by default.

Secure by Default

Argon2id hashing, split tokens, and timing-attack prevention built-in

Database Agnostic

Works with PostgreSQL, MySQL, and SQLite out of the box

Fast Integration

Get up and running in minutes with React, Vue, or Angular SDKs

Production Ready

Rate limiting, account lockout, and email verification included

100%
Type Safe
0
Core Dependencies
3
Databases Supported

Built for Security & Flexibility

Everything you need to implement secure authentication without compromising on developer experience

Developer Experience First

Clean, type-safe APIs that make authentication a breeze

server.ts
import { FortressAuth, MemoryRateLimiter } from '@fortressauth/core';
import { SqlAdapter } from '@fortressauth/adapter-sql';

// Initialize FortressAuth in 5 lines
const fortress = new FortressAuth({
  repository: new SqlAdapter(db, { dialect: 'sqlite' }),
  rateLimiter: new MemoryRateLimiter(),
});

// Sign up a user
const result = await fortress.signUp({
  email: 'user@example.com',
  password: 'SecurePassword123!',
});

if (result.success) {
  console.log('User created:', result.data.user);
}
Fast Integration
Secure by Default
Fully Typed
Pluggable Architecture
Zero Core Dependencies

Example Integrations

Explore working examples to jumpstart your integration

Try Demo

API Documentation

Interactive API reference powered by OpenAPI specification

Open in new tab