Free up to 5,000 monthly active users. Essentials from $35 a month adds your own domain and branding; Professional from $240 a month adds environments, logs, webhooks and an admin API.
$0forever
For side projects and new apps. Everything you need to replace passwords.
Get early access$35per month, from 500 MAU
For products in production that want sign-in on their own domain.
Get early access$240per month, from 500 MAU
For teams that need audit trails, more environments and a faster answer.
Get early accessCustomannual contract
For large user bases, dedicated infrastructure and contracts.
Talk to usPrices in USD, billed monthly. Pay yearly and get one month free. Pricing applies when Gatekeep leaves early access; early-access accounts are free until then.
A monthly active user (MAU) is anyone who signs in at least once in a calendar month. Signing in ten times still counts once.
Monthly price. Free covers up to 5,000 MAU on the Free plan's features. Need a custom domain? That starts on Essentials.
| MAU | Essentials | Professional |
|---|---|---|
| 500 | $35 | $240 |
| 1,000 | $70 | $240 |
| 2,500 | $175 | $545 |
| 5,000 | $350 | $1,000 |
| 7,500 | $525 | $1,200 |
| 10,000 | $700 | $1,600 |
| 20,000 | $1,400 | $3,200 |
| 30,000 | $2,100 | Talk to us |
| 40,000 | $2,800 | Talk to us |
| 50,000 | $3,500 | Talk to us |
| 50,000+ | Talk to us about Enterprise | |
| Free | Essentials | Professional | Enterprise | |
|---|---|---|---|---|
| Passkey sign-in | Included | Included | Included | Included |
| Single sign-on across your apps | Included | Included | Included | Included |
| OpenID Connect + PKCE | Included | Included | Included | Included |
| Magic-link signup and recovery | Included | Included | Included | Included |
| Ed25519 tokens, rotating keys | Included | Included | Included | Included |
| Unlimited apps | Included | Included | Included | Included |
| Custom domain | Not included | Included | Included | Included |
| Custom branding and email sender | Not included | Included | Included | Included |
| Environments | 1 | 3 | 12 | Custom |
| Log retention | 1 day | 7 days | 30 days | Custom |
| Security event webhooks | Not included | Not included | Included | Included |
| Admin API | Not included | Not included | Included | Included |
| Dedicated deployment | Not included | Not included | Not included | Included |
| Uptime SLA | Not included | Not included | Not included | 99.99% |
| Support | Community | Priority | Named engineer |
Hosted authentication built on passkeys. Gatekeep runs your sign-in page, enrolls and verifies your users' passkeys, and hands your app a signed OpenID Connect token. You don't store passwords, build reset flows or run an auth server.
They choose "Lost your passkey?", get a one-time link by email and set up a passkey on their new device. Recovering revokes every old passkey, so the lost phone can't sign in any more. Synced passkeys (iCloud Keychain, Google Password Manager, 1Password) usually survive a lost device anyway.
No. Gatekeep speaks standard OpenID Connect with PKCE, so Auth.js, Passport, Spring Security, Authlib, ASP.NET Core and any other conformant library work out of the box. Give them your issuer URL and client ID.
Every current browser supports passkeys: Chrome, Safari, Firefox and Edge on macOS, Windows, iOS, Android, ChromeOS and Linux. Users can also scan a QR code to use the passkey on their phone from someone else's computer.
Anyone who signs in to one of your apps at least once in a calendar month. Signing in many times still counts once, and silent single sign-on across your apps doesn't add more. Free covers up to 5,000.
Passkeys are bound to the domain they were created on. If your users enroll on auth.yourapp.com, those passkeys keep working no matter what happens behind it. Custom domains start on Essentials, and we recommend setting one up before you launch.
Your apps only speak standard OIDC, so swapping providers is a config change in your app, not a rewrite. On a custom domain, your users' passkeys are tied to your domain, not ours.
Gatekeep is in early access. Join the list and we'll set up your apps with you. Early-access accounts are free until general availability.
Passkey sign-in for every app you ship. Free up to 5,000 monthly active users.