Firebase Authentication
All-in-one identity platform to simplify user authentication and sign-in.
Identity Providers
10+ (Google, Apple, SAML, etc.)
Free Monthly Active Users
50,000
Free Phone Verifications
10,000/month
About Firebase Authentication
Firebase Authentication is a comprehensive identity solution that helps developers build secure and scalable authentication systems with minimal effort. It supports a wide range of authentication methods, including traditional email and password, passwordless email links, phone number verification, and federated sign-in with popular providers like Google, Apple, Facebook, Twitter, and GitHub. It also supports enterprise standards like SAML and OpenID Connect. The platform provides client-side SDKs for Web, iOS, Android, Flutter, C++, and Unity, along with a server-side Admin SDK for backend user management. Key features include multi-factor authentication (SMS and TOTP), user session management, token-based security, and seamless integration with other Firebase services like App Check for abuse prevention and Security Rules for data protection.
Supported Authentication Methods
Standard
Email & Password, Email Link (Passwordless)
Phone
Phone Number Verification (SMS)
Federated (Social)
Google, Apple, Facebook, Twitter, GitHub, Microsoft, Yahoo
Enterprise
SAML 2.0, OpenID Connect (OIDC)
Anonymous
Create and use temporary accounts for users who haven't signed up yet.
Developer Platform & Tools
Client Sdks
Web (JavaScript), iOS (Swift/Objective-C), Android (Kotlin/Java), Flutter, C++, Unity
Admin Sdk
Node.js, Java, Python, Go, .NET for server-side user management.
Firebase Emulator
Local emulator suite for testing authentication flows without using live data.
Firebaseui
Pre-built, drop-in UI libraries for Web, iOS, and Android that handle sign-in and sign-up flows.
Security Features
Multi-Factor Authentication
Support for SMS and Time-based One-Time Password (TOTP) as a second factor.
Abuse Protection
Integration with Google Cloud Identity Platform and Firebase App Check to prevent abuse.
Token Management
Uses industry-standard OAuth 2.0 and OpenID Connect tokens (JWTs).
Blocking Functions
Run custom code that can block user registration or sign-in based on specific criteria.