# Tinyauth

OpenID Connect and authentication server that puts a login screen and access controls in front of self-hosted apps through reverse proxies such as Traefik.


Source: https://findsoftware.frbit.cloud/tinyauth/
Last reviewed: 2026-11-03
Listed since: 2026-11-03

## Record

### Links

- home: https://tinyauth.app
- repository: https://github.com/tinyauthapp/tinyauth
- docs: https://tinyauth.app/docs/getting-started/
- discord: https://discord.gg/eHzVaCzRRd

### Identity

- status: active
- maintainer: tinyauthapp
- maintainerType: individual
- parent: unknown
- firstRelease: 2025
- hqCountry: unknown

### Kind

- category: auth
- hosting: binary
- language: go
- runtime: binary
- runtimeMin: unknown
- basedOn: unknown

### Content

- contentStore: not applicable
- databases: sqlite, postgres
- adminUi: no
- headlessApi: not applicable
- templating: not applicable
- i18n: yes, translations contributed through Crowdin

### Rendering and deploy

- runsAs: always-on
- renderingModes: not applicable
- installMethod: docker compose

### License

- licenseModel: open-source
- license: AGPL-3.0

### Releases

- currentMajor: 5
- latestReleaseDate: 2026-09-07

### Adoption

- githubStargazers: 8467
- packagistDownloads: not applicable
- npmWeeklyDownloads: not applicable
- contributors: 36
- pluginCount: unknown
- packagistMonthlyDownloads: unknown
- ecosystemsMonthlyDownloads: unknown
- httpArchiveSites: unknown
- wordpressActiveInstalls: unknown
- dependentRepos: unknown
- dependentPackages: unknown

### Sources

- name: https://tinyauth.app (read 2026-11-03)
- urls: https://tinyauth.app (read 2026-11-03)
- urls: https://github.com/tinyauthapp/tinyauth (read 2026-11-03)
- urls: https://tinyauth.app/docs/getting-started/ (read 2026-11-03)
- category: https://tinyauth.app (read 2026-11-03)
- maintainer: https://github.com/tinyauthapp/tinyauth (read 2026-11-03)
- maintainerType: https://raw.githubusercontent.com/tinyauthapp/tinyauth/main/README.md (read 2026-11-03)
- language: https://github.com/tinyauthapp/tinyauth (read 2026-11-03)
- runtime: https://tinyauth.app (read 2026-11-03)
- installMethod: https://tinyauth.app/docs/getting-started/ (read 2026-11-03)
- installMethod: https://tinyauth.app/docs/guides/using-the-binary/ (read 2026-11-03)
- installMethod: https://tinyauth.app/docs/guides/kubernetes/ (read 2026-11-03)
- runsAs: https://tinyauth.app/docs/guides/using-the-binary/ (read 2026-11-03)
- license: https://github.com/tinyauthapp/tinyauth (read 2026-11-03)
- i18n: https://raw.githubusercontent.com/tinyauthapp/tinyauth/main/README.md (read 2026-11-03)
- githubStargazers: https://github.com/tinyauthapp/tinyauth (read 2026-11-03)
- contributors: https://github.com/tinyauthapp/tinyauth (read 2026-11-03)
- currentMajor: https://github.com/tinyauthapp/tinyauth/releases/tag/v5.2.0 (read 2026-11-03)
- latestReleaseDate: https://github.com/tinyauthapp/tinyauth/releases/tag/v5.2.0 (read 2026-11-03)
- firstRelease: https://github.com/tinyauthapp/tinyauth/releases/tag/v0.1.0-beta.1 (read 2026-11-03)
- databases: https://tinyauth.app/docs/reference/configuration/ (read 2026-11-03)
- adminUi: https://tinyauth.app/docs/about/ (read 2026-11-03)

## Notes

Tinyauth puts a login screen in front of self-hosted applications and is an OpenID Connect certified server. It is written in Go and runs as one server process, started from a binary, a Docker container or a Helm chart on Kubernetes. Users are set in configuration as bcrypt-hashed passwords with optional TOTP secrets, and sign-in can go through OAuth providers or an LDAP directory. The [getting-started guide](https://tinyauth.app/docs/getting-started/) places it behind Traefik by default, and per-application labels restrict an app to chosen users or groups.

## Worth knowing

The about page says the project is not designed for production environments that need role-based access control and finer permissions, and recommends Authentik for advanced user management. The README says the project is maintained by a single person.

---

Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Attributes are recorded, never scored; absent means unknown.
Credit, in full: FindSoftware, CC BY 4.0