Best Identity & Access Management (IAM) Tools in 2026

Learn More

Stars
Last commit
License

Stars
Last commit
License

Stars
Last commit
License

Stars
Last commit
License

Stars
Last commit
License

Stars
Last commit
License

Best Identity & Access Management (IAM) Tools in 2026

Hanko

Passkeys, SSO, and MFA without vendor lock-in

Stars
9,000
Last commit
2 hours ago
License
Unknown

Open source authentication platform supporting passkeys, 2FA, SSO, and social login. Self-host or use Hanko Cloud, with full control over your data and no lock-in.

Open Source Alternative to:

Keycloak

Secure authentication and access control made simple

Stars
36,125
Last commit
1 hour ago
License
Apache-2.0

Comprehensive open source identity management solution offering single sign-on, social login, and fine-grained authorization for applications and services.

Open Source Alternative to:

Better Auth

Framework-agnostic authentication for TypeScript applications

Stars
29,515
Last commit
1 hour ago
License
MIT

A comprehensive authentication framework offering email/password, social sign-on, two-factor auth, and multi-tenant support with full TypeScript integration.

Open Source Alternative to:

HashiCorp Vault

Secure storage and access control for secrets and sensitive data

Stars
36,103
Last commit
2 hours ago
License
Unknown

Manages tokens, passwords, certificates, and encryption keys through a UI, CLI, or HTTP API, with dynamic credentials and encryption-as-a-service built in.

Open Source Alternative to:

JumpServer

Secure access management for modern IT infrastructure

Stars
31,249
Last commit
3 hours ago
License
GPL-3.0

Open-source privileged access management solution offering secure, browser-based access to SSH, RDP, Kubernetes, databases and remote applications.

Open Source Alternative to:

Authentik

Take control of your identity with a secure, flexible solution

Stars
24,595
Last commit
1 hour ago
License
MIT

authentik is an open-source identity provider that offers self-hosted authentication, authorization, and user management for businesses of all sizes.

Open Source Alternative to:

Logto

Secure, seamless authentication for modern applications

Stars
14,329
Last commit
1 hour ago
License
MPL-2.0

An open-source identity solution offering customizable login experiences, multi-tenant support, and comprehensive user management.

Open Source Alternative to:

Zitadel

Secure, customizable identity infrastructure for developers

Stars
14,700
Last commit
3 hours ago
License
AGPL-3.0

ZITADEL provides a comprehensive identity management solution with easy APIs, customizable workflows, and serverless deployment options.

Open Source Alternative to:

SuperTokens

Secure, customizable authentication for your applications

Stars
15,255
Last commit
2 hours ago
License
Unknown

Open-source authentication solution offering flexible, self-hosted user management with advanced features and easy integration.

Open Source Alternative to:

Ory

A certified and battle-tested identity solution

Stars
13,824
Last commit
13 days ago
License
Apache-2.0

Ory is a certified and battle-tested identity solution backed by a large open source community and trusted by Fortune 500 companies.

Open Source Alternative to:

Hexclave

Modular auth, payments, emails, and analytics for your product

Stars
6,844
Last commit
1 hour ago
License
Unknown

Self-hostable platform combining user auth, payments, email, and analytics into modular building blocks that fit around your existing product.

Open Source Alternative to:

Permify

Build scalable authorization in minutes, not months

Stars
5,935
Last commit
7 hours ago
License
AGPL-3.0

Open-source authorization service for implementing fine-grained access controls. Centralized, scalable solution supporting RBAC, ABAC and ReBAC with Google Zanzibar-inspired architecture.

Open Source Alternative to:

Cerbos

Secure, policy-based access control for modern applications

Stars
4,532
Last commit
3 hours ago
License
Apache-2.0

A scalable authorization layer that provides fine-grained access control through externalized policies, enabling secure and flexible permissions management.

Open Source Alternative to:

Defguard

Zero-Trust VPN with built-in 2FA/MFA and SSO capabilities

Stars
2,800
Last commit
1 hour ago
License
Unknown

Enterprise-grade open source VPN solution combining WireGuard with mandatory 2FA/MFA and integrated OpenID Connect SSO for secure remote access

Open Source Alternative to:

Authgear

Managed identity and access management for any app

Stars
1,965
Last commit
5 days ago
License
Apache-2.0

Authgear is a managed IAM platform handling authentication, SSO, and user management for B2C and B2B apps, with biometrics, MFA, and zero-trust support.

Open Source Alternative to:

Werbot

Secure, scalable server access management for DevOps

Stars
169
Last commit
8 days ago
License
BUSL-1.1

Centralized platform for managing SSH access, enhancing security, and streamlining server administration for DevOps teams.