What does Auth0 handle for my app?
Configure the methods your customers can use to sign in. Auth0 hosts the page that handles that interaction, while your app controls what happens once they return.
A booking customer can enter their email and password on the hosted page, then return to your booking dashboard. Your app still checks which booking that person can see.
How do I get one test customer back to my app after login?
Create an Auth0 tenant, which is a separate workspace for sign-in settings and accounts. Register your web app, turn on the way customers will sign in, and use the setup guide for your framework.
Add the exact addresses your app uses after sign-in and sign-out to the allowed return settings. A mismatch can block the return trip. Keep any secret in server settings. Use a disposable account to try a successful sign-in, an incorrect password and a sign-out on the domain you plan to use.
Does a valid sign-in give a customer access to my whole app?
A valid sign-in establishes the account’s identity. Check ownership, membership or permission on the server before returning a private booking or changing it.
If your app has a separate API, meaning an address your app uses to request data or actions, use Auth0’s documented access checks for requests to it. That still leaves the specific booking decision to your app. Confirm that two customers with the same role cannot see each other’s records.
How can someone recover access if they forget a password?
When Auth0 manages a customer’s email and password sign-in and their email address is known, Universal Login can send a password reset link. If the customer signs in through Google or a work identity provider, they recover their password with that provider.
Some paid plans include extra sign-in methods such as an authenticator app. If you enable an extra check, verify what happens when a customer loses their device. Where a recovery code is supported, test that route. Without a usable code, an administrator may need to reset the customer’s extra sign-in setup.
- See Auth0’s example password reset emailSee the example email alongside Auth0’s explanation of the reset link.
How does Auth0 count the people who use my app?
Auth0 counts distinct account IDs that have qualifying sign-in activity during a month within an Auth0 tenant. A successful background renewal of a sign-in can count too. Multiple sign-ins by the same account within that tenant still count once for the month.
These are dollar amounts displayed November 8, 2026. The Essentials example uses the consumer-app option, monthly billing and a quota of 500 active users. Other paid quotas are available. Directory provisioning lets an organization’s directory manage accounts in your app.
| Plan | Listed price and user limit | What to check |
|---|---|---|
| Free | $0 per month, up to 25,000 monthly active users | Lists five customer organizations, one work sign-in connection, self-service setup and directory provisioning. Above 25,000 active users, choose a paid plan with an appropriate quota. |
| Essentials example | $35 per month with a selected quota of 500 monthly active users | The selected consumer plan lists Pro multi-factor methods. Choose the quota and features that fit your app. |
| Work sign-in when upgrading | Business-plan price depends on the quota and features you select | Auth0 says to move to a business plan to keep work sign-in connections, self-service setup and directory provisioning when upgrading to Essentials. |
On a small screen, scroll the table sideways to read every column.
Can I take my Auth0 customer accounts to another service?
Auth0’s ordinary bulk export covers supported profile fields on paid plans. Password hashes for accounts in Auth0’s hosted database require a separate support request. The Free plan excludes those requests.
For a paid tenant, the administrator opens a support case and sends the public encryption key. Keep the matching private key secret. Auth0 reviews the request for eligibility and gives no delivery date.
An approved request needs written authorization, confirmation from another tenant administrator if there is one, and a signed acknowledgment from an eligible executive.
Export account records and save sign-in workspace configuration separately. Check whether the destination accepts the exported hash format. Test account IDs, social sign-in, access to existing records and whether users need a fresh sign-in or password reset.
What changes if my customers each have a team?
Auth0 Organizations can model customer teams and their memberships. Choose how people enter the right team, then enforce that team’s access to your app’s records.
Work sign-in lets customers use an account managed by their employer. Check the plan and connection requirements with the customer before promising that option. Test what a removed member can access through an old saved link.
Where can you learn the next steps?
- Check sign-in, recovery and private accessUse separate accounts and a signed-out browser to verify which information each customer can use.