Authentication & Security
Complete authentication & user management platform for Next.js and React with 10,000 free MAUs
Clerk Auth API is best for next.js, React, and full-stack developers wanting drop-in, beautiful authentication and B2B user management
Bearer Token (Secret Key + Publishable Key)
High-scale serverless edge session verification
js, Remix, and full-stack web applications. It replaces outdated, brittle auth flows with beautiful, customizable drop-in UI components (`<SignIn />`, `<SignUp />`, `<UserProfile />`, `<OrganizationSwitcher />`) that can be integrated in minutes.
Clerk natively supports passwordless email/SMS OTPs, passkeys (Touch ID / Face ID), multi-factor authentication (TOTP), social logins (Google, Apple, GitHub, Microsoft), and enterprise SAML SSO. js developers.
| Feature | Status | Description & Capabilities |
|---|---|---|
| Email Address Verification | ✓ Supported | Provides native Email Address Verification capabilities integrated within the API. |
| Phone Number Validation & Carrier Lookup | ✓ Supported | Provides native Phone Number Validation & Carrier Lookup capabilities integrated within the API. |
| Two-Factor Authentication (2FA / OTP) | ✓ Supported | Generate and verify time-based or SMS/email OTP codes to secure customer logins and transfers. |
| OAuth 2.0 / SSO Integration | ✓ Supported | Provides native OAuth 2.0 / SSO Integration capabilities integrated within the API. |
| Password / Breach Detection | ✓ Supported | Provides native Password / Breach Detection capabilities integrated within the API. |
| IP & Domain Reputation Scoring | ✓ Supported | Provides native IP & Domain Reputation Scoring capabilities integrated within the API. |
| Sandbox / Test Environment | ✓ Supported | Dedicated testing sandbox with mock data and test credentials for staging development. |
| Phishing & Malware URL Detection | ✗ Not Supported | Phishing & Malware URL Detection is currently not supported by Clerk Auth API. |