Ory

Ory Kratos lifts identity out of application code and puts it behind HTTP APIs. Login, registration, account recovery, verification and profile management become flows your services consume, rather than features every team rewrites once per product.

It is API first and interface agnostic, with both browser-based and native app flows, so any framework can drive it. Identity schemas and traits define what a user record holds, admin APIs cover lifecycle management, and the wider Ory stack adds OAuth2, OpenID Connect and access control when you need them.

Self-hosting is treated as a first-class path, not a courtesy.

• Platforms: installs on Linux, macOS, Windows and Docker, or builds from source.
• Databases: PostgreSQL, MySQL and CockroachDB are the supported stores.
• Kubernetes: deploying to Kubernetes and other orchestrators is covered in the install guide.
• Multi-factor: MFA belongs to the core flow set rather than arriving as an add-on.
• Migration path: pairing Kratos with Ory Hydra replaces the OAuth2 and OpenID Connect side of an existing provider while clients keep speaking the same protocols.

The open source distribution carries no license requirements and suits individuals, researchers and workloads that can live without an SLA. A managed equivalent runs the same server on the Ory Network, API compatible with what you would host yourself, for teams that would rather not operate identity infrastructure at all.