Authelia
Authelia: A flexible, free MFA server for reverse-proxy-based self-hosted environments. Ranked #29 of 54 in Multi-Factor Authentication Software by our editors (6.4/10); pricing: Free plan; best for free self-hosted reverse-proxy MFA.
At a glance
- Editor score6.4 / 10
- PricingFree plan
- Best forFree self-hosted reverse-proxy MFA
- Free planYes
- Paid fromFree
- Adaptive access policiesNo
- Facts checked23 Sep 2026
Where it wins
- Supports TOTP, WebAuthn, passkeys, and Duo mobile push
- Works with major reverse proxies, LDAP, Docker, and Kubernetes
- Provides fine-grained access policies and OpenID Connect 1.0
Where it doesn't
- Self-hosted deployment requires infrastructure and ongoing administration
- Its focus is narrower than full enterprise MFA suites
- Authentication backends are limited to LDAP and YAML files
Our verdict on Authelia
Authelia is an open-source authentication and authorization server for web applications running in self-hosted environments. It combines multi-factor authentication, single sign-on, and access-control policies for teams managing services behind reverse proxies. Supported factors include username and password, TOTP, FIDO2 WebAuthn security keys, passkeys, and Duo mobile push. Deployment is available through Docker, Kubernetes, or bare metal, making it suited to Linux-based infrastructure owners who want control over their authentication layer without a commercial plan.
Its strongest fit is the reverse-proxy ecosystem. Authelia integrates with Traefik, Caddy, Envoy, HAProxy, NGINX, NGINX Proxy Manager, SWAG, and Skipper through forwarded authentication, proxy authorization endpoints, or trusted headers. It can also act as an OpenID Connect 1.0 provider and connect to LDAP. Access policies can be scoped by domain, path, user, group, network, and HTTP method, giving administrators more control than a basic login gateway. Passkeys and WebAuthn also support passwordless authentication for compatible workflows.
The trade-off is operational scope. Authelia is designed to be deployed and maintained by the organization using it, so it fits best where infrastructure administration is already part of the operating model. Its authentication backends center on LDAP and YAML files, and its overall focus is web access through reverse proxies rather than a broad enterprise MFA suite. Choose Authelia for free, open-source MFA and SSO across self-hosted applications; consider another category option if you need a managed service or a wider enterprise platform.
Your product? Our editors can test Authelia in depth and publish a review, labelled as paid · from $149/mo →
Authelia pricing
Authelia fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Deployment | Self_hosted |
| Supported factors | Password; TOTP; WebAuthn/FIDO2 security keys; Passkeys; Duo mobile push |
| App integration methods | Reverse-proxy forward authentication; OpenID Connect; trusted headers; LDAP authentication backend |
| Adaptive access policies | No |
| Passwordless authentication | Yes |
| Device trust controls | No |
| Deployment | Self-hosted |
| Platforms | Web |
| Support | Docs, Community |
| Built for | Solo, Small business, Mid-market (editorial estimate) |
| Integrations | 10 integrations: OpenID Connect, Duo, Traefik, Caddy, Envoy, NGINX … See all → |
| Pricing | Free plan |
| Website | authelia.com |
| Facts checked | 23 Sep 2026 |
Authelia integrations
Authelia lists 10 integrations on its own site.
- OpenID Connect
- Duo
- Traefik
- Caddy
- Envoy
- NGINX
- HAProxy
- LDAP
- Active Directory
- FreeIPA
See all Authelia integrations →
Alternatives to Authelia
- Cisco Duo PasswordlessA broad MFA platform with a capable free tier and paid passwordless access.9.4
- miniOrange Multi-Factor AuthenticationBroad MFA coverage for mixed environments, with adaptive access and passwordless options.9.3
- LoginTCA flexible MFA platform with broad factors, offline access, and multiple deployment options.9.1
See all Authelia alternatives →
Also Ranked In
Authelia is ranked in 4 of our directories.
Used Authelia? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Authelia for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Authelia is listed in our Multi-Factor Authentication Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/authelia/"><img src="https://www.itechguides.com/best/badge/authelia.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update