The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Yes—Supabase users can keep their existing passwords when you move their Auth data. For a move between Supabase projects, Supabase documents migrating the Auth schema, including users and hashed passwords, without requiring password resets. A platform-to-self-hosted restore also includes auth.users and related data. But preserving passwords does not necessarily preserve active sessions: a platform-to-self-hosted move requires users to authenticate again.
What carries over—and what may not
Supabase’s “Migrating Auth Users Between Supabase Projects” says the Auth tables, including users and their hashed passwords, can be migrated between projects so users do not need to reset or recreate passwords.
That answers the password question, not the session question. Passwords are credentials stored with Auth data; existing sessions rely on JWTs. For a project-to-project move, using a different JWT secret invalidates existing tokens, while reusing the original secret preserves them. Changing the secret also regenerates the destination anon and service_role API keys. For a platform-to-self-hosted move, Supabase says the JWT secrets differ and users must authenticate again.
Choose the procedure for your destination
| Move | Password outcome | Session outcome | What to use |
|---|---|---|---|
| Supabase project to another Supabase project | Auth data, including password hashes, can be migrated. | Existing JWTs remain valid only if the destination uses the original JWT secret; a changed secret invalidates them. | Follow Supabase’s Auth migration troubleshooting guidance and the general migration guidance it references. |
| Supabase platform project to self-hosted Supabase | The database dump includes auth.users and related data. |
Users must authenticate again because the platform and self-hosted JWT secrets differ. | Follow Supabase’s platform-to-self-hosted restoration guide. |
| Another Auth provider to Supabase Auth | Depends on the provider and supported hash format. Supabase documents bcrypt and Argon2 imports for its Auth0 workflow. | Do not assume existing sessions or the Supabase database-restore behavior applies. | Use the provider-specific procedure, such as Supabase’s Auth0 migration guide. |
These are distinct migration paths. The Auth0 guide’s staged import is not the procedure for restoring a Supabase database.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Restore a platform project to self-hosted Supabase
The steps below follow the official platform restoration guide. Test the restore on a separate self-hosted instance before relying on it for the destination. You need a working self-hosted Supabase instance, the database connection details, the Supabase CLI, and psql. The CLI uses Docker for its database-dump operation.
1. Export roles, schema, and data separately
Run the documented dump pattern against the source project, substituting its database connection string for the example value:
Rank #2
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T120. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T120 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-C port : Insert the T120 security key into the USB-C port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
supabase db dump --db-url "[CONNECTION_STRING]" -f roles.sql --role-only
supabase db dump --db-url "[CONNECTION_STRING]" -f schema.sql
supabase db dump --db-url "[CONNECTION_STRING]" -f data.sql --use-copy --data-onlyThe Supabase CLI applies Supabase-specific filtering. The guide cautions against using raw pg_dump directly because it can include internal schemas and cause permission errors during restore. Consult the current official guide for the complete restore command and syntax, including its data-import handling.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →2. Restore the SQL files to the destination
Use psql with the destination database credentials to apply the exported files as directed by the guide. For the data import, the guide sets session_replication_role to replica to disable triggers and avoid problems such as double encryption. Follow its exact command sequence rather than improvising the order or omitting the data-import setting.
Rank #3
- ✅ PROTECT ONLINE ACCOUNTS – A password manager, two-factor security key, and secure communication token in one, OnlyKey can keep your accounts safe even if your computer or a website is compromised. OnlyKey is open source, verified, and trustworthy.
- ✅ UNIVERSALLY SUPPORTED – Works with all websites including Twitter, Facebook, GitHub, and Google. Onlykey supports multiple methods of two-factor authentication including FIDO2 / U2F, Yubico OTP, TOTP, Challenge-response.
- ✅ PORTABLE PROTECTION – Extremely durable, waterproof, and tamper resistant design allows you to take your OnlyKey with you everywhere.
- ✅ PIN PROTECTION – Locking your device means that if this device is stolen, data remains secure, after 10 failed attempts to unlock all data is securely erased.
- ✅ EASY LOG IN – No need to remember multiple passwords because by plugging OnlyKey to your computer, it automatically inputs your username and password. It works with Windows, Mac OS, Linux, or Chromebook, just press a button to login securely!
3. Verify the restore
- Confirm that expected tables exist.
- Compare row counts in important tables, including
auth.users. - Check that required extensions are available and enabled.
- Test the restored application’s authentication flows before directing users to the new instance.
Finish the migration beyond the database
A database dump preserves database records; it does not by itself configure every service or move every asset. The self-hosted guide calls out these additional tasks:
- Secrets and keys: Set the self-hosted JWT secrets and API keys for the destination. Do not expect platform tokens to work there.
- OAuth: Configure each provider and update its redirect URLs to the destination.
- Email: Configure SMTP and email settings.
- Domain: Set up the custom domain and DNS for the new instance.
- Edge Functions: Copy and deploy functions separately.
- Storage: Transfer storage objects separately; the database restore does not move the objects themselves.
Check compatibility before switching traffic
Managed Supabase and a self-hosted Docker installation may run different Postgres and Auth versions. Supabase warns that a source database can contain settings, tables, or columns absent from the destination version; extensions may also need to be enabled. Its guide gives version-specific examples, including Postgres 17 settings and newer Auth or Storage schema elements, which can change over time. A test restore helps expose these mismatches while the original project is still available.
Rank #4
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Account types need different expectations
Supabase Auth supports password, passwordless email or phone, OAuth, and SAML SSO sign-in methods. A database restore does not configure external providers or their redirect URLs, so check those settings as part of the move. Anonymous users are a special case: Supabase notes that they are not tied to an identity that lets them sign back in after signing out. Avoid treating an anonymous account as a conventional password-backed user.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsFor reference, see Supabase’s Users documentation.
There is no universal Auth-only migration script
For project-to-project moves, Supabase says there is no one-size-fits-all script for migrating only the Auth schema and points to its general migration guidance. Plan the migration around the full source and destination setup, and verify the resulting Auth data and login behavior rather than assuming a single command covers every project.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
