Head to head
Stop guessing which one. Put them side by side.
Up to 4 tools, same rows for each: what it is, what it really costs, the trap, and how to wire it up. The URL carries your picks — send it to anyone.
Supabase AuthBetter AuthLucia
Quick read
- Free with no card: Better Auth, Lucia.
| Field | Supabase Authsupabase.com | Better Authbetter-auth.com | Lucialucia-auth.com |
|---|---|---|---|
| What it is | Authentication built into the Supabase Postgres platform. Users live in an auth.users table inside your own database, and row-level security policies read the JWT directly. The free tier covers 50,000 monthly active users; the $25/mo Pro plan includes 100,000 then charges $0.00325 per extra MAU. | Framework-agnostic TypeScript authentication library that runs inside your own app and writes to your own database. Covers email/password, social OAuth, two-factor, organizations, passkeys and API keys through a plugin system. Vercel acquired the project in July 2026; it stays MIT-licensed, self-hosted and community-governed. | No longer a library. Lucia was deprecated in March 2025 and now exists as a learning resource: a copy-paste auth_session.ts reference implementation plus The Auth Book, a free guide covering sessions, tokens and password handling. The site was last refreshed in July 2026. |
| Category | Auth & user management | Auth & user management | Auth & user management |
| Cost tier | mixed | free | free |
| Pricing | Free to 50k MAU · Pro $25/mo incl. 100k then $0.00325/MAU | Free and open source (MIT) · self-hosted, no MAU fees | Free · deprecated library, now MIT reference code and a written guide |
| Why builders pick it | If your data already sits in Supabase, auth is effectively free and authorization becomes a SQL policy instead of application middleware you have to remember to apply. | No per-MAU bill ever and no vendor holding your user table — auth becomes just another dependency. The plugin system covers most of what you would otherwise pay Clerk or Auth0 for. | Read it before choosing any vendor — it is the fastest way to genuinely understand what session auth does, and the single-file implementation is enough for small projects. |
| Watch out for | Per-MAU overage is the cheapest in this list, but SAML SSO is billed separately at $0.015/MAU. Free projects pause after a week of inactivity, and misconfigured row-level security is a common route to leaking a whole table publicly. | You own the hard parts: session security, email deliverability, rate limiting and breach response are all yours. Vercel's July 2026 acquisition preserves MIT licensing, but roadmap direction now sits with a hosting vendor. | Do not install the npm package for new work; it is unmaintained and will not receive security fixes. This is documentation and example code, not a supported dependency. |
| How to wire it up | npm i @supabase/supabase-js | npm i better-auth | not logged |
| Editor's pick | No | No | No |
Which one did you ship?
The grid says what these tools are. This says what builders did about it — one decision per person, changeable whenever you change your mind.
0/280Sign in to add yours.
Or try
Hand this to your Lovable agent
# Tool comparison — Supabase Auth vs Better Auth vs Lucia Source: Kbaise, a directory of tools that work with Lovable projects. Pick one and tell me why before writing any integration code. ## Supabase Auth (supabase-auth) - URL: https://supabase.com/auth - Category: Auth & user management - Cost: mixed — Free to 50k MAU · Pro $25/mo incl. 100k then $0.00325/MAU - What it is: Authentication built into the Supabase Postgres platform. Users live in an auth.users table inside your own database, and row-level security policies read the JWT directly. The free tier covers 50,000 monthly active users; the $25/mo Pro plan includes 100,000 then charges $0.00325 per extra MAU. - Why builders pick it: If your data already sits in Supabase, auth is effectively free and authorization becomes a SQL policy instead of application middleware you have to remember to apply. - Trap: Per-MAU overage is the cheapest in this list, but SAML SSO is billed separately at $0.015/MAU. Free projects pause after a week of inactivity, and misconfigured row-level security is a common route to leaking a whole table publicly. - Wiring: npm i @supabase/supabase-js - Full dossier: /api/public/tools/supabase-auth ## Better Auth (better-auth) - URL: https://better-auth.com - Category: Auth & user management - Cost: free — Free and open source (MIT) · self-hosted, no MAU fees - What it is: Framework-agnostic TypeScript authentication library that runs inside your own app and writes to your own database. Covers email/password, social OAuth, two-factor, organizations, passkeys and API keys through a plugin system. Vercel acquired the project in July 2026; it stays MIT-licensed, self-hosted and community-governed. - Why builders pick it: No per-MAU bill ever and no vendor holding your user table — auth becomes just another dependency. The plugin system covers most of what you would otherwise pay Clerk or Auth0 for. - Trap: You own the hard parts: session security, email deliverability, rate limiting and breach response are all yours. Vercel's July 2026 acquisition preserves MIT licensing, but roadmap direction now sits with a hosting vendor. - Wiring: npm i better-auth - Full dossier: /api/public/tools/better-auth ## Lucia (lucia) - URL: https://lucia-auth.com - Category: Auth & user management - Cost: free — Free · deprecated library, now MIT reference code and a written guide - What it is: No longer a library. Lucia was deprecated in March 2025 and now exists as a learning resource: a copy-paste auth_session.ts reference implementation plus The Auth Book, a free guide covering sessions, tokens and password handling. The site was last refreshed in July 2026. - Why builders pick it: Read it before choosing any vendor — it is the fastest way to genuinely understand what session auth does, and the single-file implementation is enough for small projects. - Trap: Do not install the npm package for new work; it is unmaintained and will not receive security fixes. This is documentation and example code, not a supported dependency. - Full dossier: /api/public/tools/lucia ## Quick read - Free with no card: Better Auth, Lucia. ## Rules 1. Prefer the free tier when no budget was stated, and say what the ceiling is. 2. Read the full dossier before integrating. 3. Fetch /api/public/models before writing any AI model ID.
Agents can fetch the same thing: GET /api/public/compare?slugs=supabase-auth,better-auth,lucia