Auth
Centralized authentication for your platform
RS256 JWT auth server with OAuth, 2FA, magic links, and multi-tenant support. Your users get one secure login across all your apps.
Available as a whitelabel deployment for your business
6+
Auth methods
RS256 JWT
Token type
< 5 min
Setup time
What's included
Inside Auth
Sign in to HQ
One identity across HQ
Protected by TOTP 2FA · magic-link sign-in available
One identity across everything you ship
HQ Auth is the single sign-on spine for the entire suite and for your own apps. One login, one session, shared across every subdomain — so your users authenticate once and move freely.
- RS256 JWT with refresh-token rotation and parent-domain session cookies
- Email/password plus OAuth — Google, GitHub, Apple, Microsoft
- TOTP two-factor and magic-link sign-in
Security that passes the review
Asymmetric signing, short-lived access tokens, rotating refresh tokens and a complete audit log — the defaults you would otherwise spend a quarter building and a security firm flagging.
- Read-only verification keys distributed per app; private signing key never leaves Auth
- Session management and full authentication audit trail
- Brute-force protection and device/session revocation
Whitelabel login in minutes
Drop in your brand, configure per-app roles, and ship. Tenants get their own branded login pages with no fork of the codebase.
- Custom branding (logo, colours, fonts) on every login surface
- Multi-tenant with per-app role assignment
- Setup measured in minutes, not sprints
Include Auth in your plan
Auth is available on all HQ FS whitelabel plans. Deploy it with your own brand.
View Pricing